NovixSun — разработка сайтов ЕреванNovixSun

Privacy Policy

Effective date: July 29, 2026 · Last updated: September 8, 2026

This Privacy Policy explains what personal data the owner of novixsun.com processes, for what purpose, and how it is protected. The data controller is an individual — the owner and administrator of novixsun.com (the “Operator”). Contact for any data-related questions: [email protected]. By using the site and submitting a request, you agree to this Policy.

1. Data we collect

We collect only the data needed to contact you and run the site:

  • Contact form data: name, contact (email or phone) and message text. You provide these voluntarily.
  • Google sign-in (OAuth) data: email, name and your Google account identifier. We receive them only after your explicit consent in the Google dialog and only if your email is verified.
  • Technical data: IP address, requested pages, interface events (clicks), browser and device type — collected automatically to prevent abuse and to understand how the site is used.

We do not collect payment data or special categories of personal data.

2. Why we process data

  • to handle your request and contact you back;
  • to enable account sign-in if you register;
  • to protect the site from spam and abuse (IP-based rate limiting);
  • to improve the site based on anonymized visit statistics.

3. Cookies, local storage and analytics

The site uses only the minimum necessary cookies and browser local storage:

  • Technical cookies — for sign-in security (CSRF protection during Google authorization).
  • localStorage — to keep your session token if you are logged in.

We may use web analytics services — for example, Google Analytics and Yandex Metrica. Using cookies, they collect anonymized visit data (pages viewed, device type, approximate location by IP, referral source) so we can understand how to improve the site. These services act as independent controllers for the data they collect — we recommend reviewing their privacy policies. We do not use advertising or third-party tracking cookies. You can clear cookies and local storage in your browser settings.

4. Sharing data with third parties

We do not sell your data. It may be processed by our technical providers solely to run the service:

  • Google — Google OAuth authorization and web analytics (Google Analytics), where used;
  • Yandex — web analytics (Yandex Metrica), where used;
  • Email provider (SMTP) — delivering request notifications to us;
  • Cloudflare — site protection and acceleration (traffic passes through it, including your IP address);
  • OpenAI — generating the AI assistant's replies in the site chat (see section 6).

We may disclose data where required by applicable law.

5. Storage and security

Data is stored in a PostgreSQL database on a secured server. The connection to the site is protected by HTTPS (SSL). Passwords, if you register, are stored as an irreversible hash, never in plain text. Access to the data is restricted.

6. AI assistant chat

The site runs a chat with an AI assistant. The conversation is stored on our server so you can pick it up when you come back and so the studio owner can reply to you personally. We store your IP address, the page language and service counters alongside it.

The text of your messages is sent to OpenAI to generate the reply — they act as an independent processor for that data. Don't put anything into the chat you wouldn't share with a third party: passwords, payment details or other confidential information.

Conversations with no contact request are deleted automatically after 90 days. If you did leave a request, the conversation is kept with it as context — for as long as it is needed to reach you, or until you ask us to delete it.

7. «What could be better?» feedback

The site and the Telegram bot have a feedback form. We store the text of your message, your name (if you gave one), the page you wrote from, the language and your IP address — the last one is used to limit how many messages one person can send per day.

Only the studio owner reads what you write there. We do not publish these messages on the site or anywhere else, do not pass them to third parties and do not use them for advertising.

Feedback messages are deleted automatically after 90 days.

8. Retention

We keep contact request data for as long as needed to process your inquiry and follow up, and delete it upon your request or when it is no longer needed. Chat conversations without a request are kept for 90 days. Feedback messages are kept for 90 days. Technical logs are kept for a limited time.

9. Your rights

You may request access to your personal data, its correction or deletion, and withdraw your consent to processing. To do so, email [email protected] — we will respond within a reasonable time.

10. Changes to this Policy

We may update this Policy. The current version is always available on this page with the date of the last update.

11. Contact

For any questions related to the processing of personal data, email [email protected].