Privacy Policy

Effective Date: March 16, 2026

1. Introduction

NoviSpace ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we handle information when you use our AI-powered spatial design consultation service (the "Service").

2. Information We Collect

2.1 Information You Provide

• Style Preferences: Responses to our style quiz (furniture preferences, color preferences, design styles)
• Budget Information: Budget range or specific amount you provide for design projects
• Voice & Video: Real-time audio and video captured during live consultation sessions via your device camera and microphone

2.2 Automatically Collected Information

• Session Data: Conversation transcripts, AI-generated design recommendations, room measurements, and bookmarked ideas
• Device Information: Browser type, device type, and screen resolution (for optimal display)
• Usage Data: Session duration, features used, and interaction patterns

2.3 Information We Do NOT Collect

• No user accounts, email addresses, or names
• No payment information (we do not process transactions)
• No IP addresses or precise geolocation
• No cookies or persistent tracking identifiers

3. How We Use Your Information

3.1 Service Delivery

• Process audio and video in real-time to provide AI-powered design consultation
• Generate personalized design recommendations based on your space and preferences
• Create post-session reports with bookmarks, measurements, and shopping links

3.2 Service Improvement

• Improve AI model accuracy and response quality
• Enhance user experience and interface design
• Develop new features and functionality

4. How We Store Your Information

4.1 Local Storage (Your Device)

All session data (transcripts, bookmarks, measurements, budget tracking) is stored exclusively in your browser's localStorage. This data:

• Remains on your device and is never uploaded to our servers
• Can be deleted at any time by clearing your browser data
• Is not accessible to us or any third parties
• Is lost if you use a different browser or device

4.2 Server-Side Processing (Temporary)

During active consultation sessions, audio and video data is:

• Transmitted in real-time to our backend server and Google's Gemini API
• Processed immediately and discarded
• NOT stored, logged, or retained after the session ends
• Encrypted in transit using industry-standard protocols (TLS/SSL)

5. Third-Party Services

5.1 Google Gemini API - Third-Party Processing (IMPORTANT)

CRITICAL NOTICE: Your camera, microphone, and conversation data is sent to and processed by Google's Gemini AI, a third-party service over which we have NO CONTROL.

When you use NoviSpace:

• Your audio, video, and conversation are transmitted in real-time to Google's servers
• Google processes this data according to their own privacy policy and terms
• We do NOT know, cannot control, and are NOT responsible for how Google handles your data
• Google may store, analyze, or use your data for AI model training or improvement
• Google's data retention policies apply (not ours)

Google's Policies (you should review these):

• Google Privacy Policy: https://policies.google.com/privacy
• Google Terms of Service: https://policies.google.com/terms
• Gemini API Terms: https://ai.google.dev/gemini-api/terms

For questions about how Google handles your data, contact Google directly. We cannot answer questions about Google's data practices.

5.2 Google Cloud Platform

Our Service is hosted on Google Cloud Run. Google may collect standard web server logs (timestamps, request types, response codes) for infrastructure purposes. We do not have access to or control over this logging.

5.3 Shopping Link Redirects

Post-session reports include shopping links to third-party retailers (Amazon, Wayfair, IKEA, CB2, Article). When you click these links:

• You leave NoviSpace and are subject to the retailer's privacy policy
• We do not track clicks or receive any information about your purchases
• We are not affiliated with and do not endorse any retailer

6. Data Sharing and Disclosure

We do NOT sell, rent, or share your personal information with third parties, except:

6.1 Service Providers

• Google (Gemini API and Cloud Platform) as described above

6.2 Legal Requirements

• If required by law, court order, or government regulation
• To protect our rights, safety, or property
• To investigate fraud or security issues

6.3 Business Transfers

• In connection with a merger, acquisition, or sale of assets (though we collect minimal data)

7. Your Rights and Choices

7.1 Access and Deletion

• Local Data: You can delete all NoviSpace data by clearing your browser's localStorage
• Camera/Microphone: You can revoke camera and microphone permissions in your browser settings at any time
• Opt-Out: Simply stop using the Service to stop data processing

7.2 Data Portability

• Session reports are available for download as JSON files from your browser's localStorage
• You can manually export this data at any time using browser developer tools

8. Data Security

We implement reasonable security measures:

• Encryption in Transit: All data transmitted between your browser and our servers uses HTTPS/WSS (TLS 1.2+)
• No Persistent Storage: We do not store session data server-side, reducing breach risk
• Access Controls: Our infrastructure uses IAM roles with least-privilege access

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

NoviSpace is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. International Users

Our Service is hosted in the United States (Google Cloud us-central1 region). If you access NoviSpace from outside the US:

• Your data may be transferred to and processed in the United States
• The US may have different data protection laws than your country
• By using our Service, you consent to this transfer

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Effective Date." Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us by opening an issue on our GitHub repository:

https://github.com/sogolrabiei/NoviSpace/issues

13. Disclaimer of Warranties

NoviSpace is provided "AS IS" and "AS AVAILABLE" without any warranties. We make no guarantees about:

• Data accuracy, completeness, or reliability
• Service availability or uninterrupted access
• Security of data transmission
• Third-party service performance (Google Gemini API)