Privacy Policy

Effective October 17, 2026

This policy explains what personal information Nuvato AI ("Nuvato AI", "we", "us") collects, how we use it, and who we share it with. It covers our website at nuvato.ai, our client portal, and the calls, emails and text messages we exchange with you.

SMS consent is not shared with third parties.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from every category of sharing described in this policy; that information will not be shared with any third parties.

1. What personal information we collect

Information you give us

When you book a consultation or contact us: your name, work email address, company, phone number, the service you are interested in, any notes you add, and the meeting time and time zone you choose.
When you become a client: the names, email addresses, phone numbers and roles of the people at your company who use our client portal, and the password each person sets. We store passwords only as a one-way cryptographic hash.
When you use the client portal: the messages and requests you send us, and your decisions on estimates and project approvals.
When you text or call us: your mobile number, the content of text messages you send and receive, and call details. Calls may be recorded or transcribed where we tell you so at the start of the call.

Information collected automatically

Sign-in and security records: when you sign in to the client portal we record the time, your IP address and your browser's user agent, so we can protect your account and show you where it is signed in.
Cookies: the client portal uses one cookie, which keeps you signed in. We do not use advertising cookies or third-party analytics or tracking on this website.
Server logs: our hosting provider records standard request information (such as IP address, page requested and time) to operate and secure the service.

Information from others

Payments: card payments are processed by Stripe. We receive the outcome of a payment and the amount, not your full card number.
Signatures: documents are signed through DocuSign. We receive a record that a document was signed, by whom and when.

2. How we use personal information

To respond to your enquiry and schedule and hold the consultation you booked.
To prepare estimates, deliver the work you engage us for, and report on its progress.
To run your client portal account, including invitations, sign-in and security.
To issue invoices and process payments.
To send you service communications by email, phone call, or, where you have agreed to receive them, text message. The text messages we send are described in our Terms and Conditions.
To answer your support requests.
To protect our systems and your account, prevent fraud and abuse, and keep records we are required to keep by law.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Who we share personal information with

We share personal information only with the service providers that help us run our business, only for the purposes above, and under contracts that require them to protect it:

Hosting and storage: Fly.io (application hosting), Neon (database) and Google Cloud (file storage).
Scheduling and email: Google Workspace (calendar invitations and meeting links) and Resend (email delivery).
Phone and text messaging: RingCentral, which carries our calls and text messages.
Payments: Stripe.
Electronic signatures: DocuSign.

We may also disclose information when required by law or legal process, to protect the rights, property or safety of Nuvato AI, our clients or others, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply to it.

SMS consent is not shared with third parties. We do not share your mobile number or your consent to receive text messages with any third party or affiliate for their marketing or promotional purposes. The service providers above process messages only to deliver them on our behalf.

4. How long we keep it

We keep personal information for as long as we need it for the purposes above: for the length of a client relationship and afterwards for as long as the law requires us to keep business, tax and contract records. Enquiries that do not lead to an engagement are deleted when they are no longer needed. You can ask us to delete your information sooner, as described below.

5. How we protect it

Information is encrypted in transit, passwords are stored as one-way hashes, access to client information is restricted to the people who need it, and every request to the client portal is checked against the account it belongs to. No method of transmission or storage is perfectly secure, but we work to protect your information and will tell you if a breach affects it as the law requires.

6. Your choices and rights

Text messages: reply STOP to any text message to stop receiving them, or HELP for help.
Email: service emails about work you have engaged us for are part of the service, but you can tell us how you would prefer to be contacted.
Access, correction and deletion: you can ask us for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing support@nuvato.ai. Depending on where you live (for example, California or the European Economic Area) you may have additional rights, and we will honour them as the law requires. We will not discriminate against you for exercising them.

7. Children

Our services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

8. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed, and we will tell clients about material changes before they take effect.

9. Contact us

Questions about this policy or your information: email support@nuvato.ai or visit nuvato.ai.