Privacy Policy | Novantis

1. Who We Are

Novantis (“we,” “our,” or “us”) operates the Novantis estate planning platform at novantis.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

We collect information you provide directly, including:

Account information (email address, password hash)
Birth year (for age verification — full date of birth is never stored)
State of residence and marital status for document generation
Names of beneficiaries, executors, and agents you designate in your documents
Payment information processed by Stripe (we do not store card numbers)

We do not collect Social Security numbers, driver's license numbers, or full financial account details.

3. How We Use Your Information

To generate your legal documents and deliver them to you
To provide AI-assisted guidance during your estate planning session
To send you compliance alerts when state laws affecting your documents change
To send transactional emails (receipt, document delivery, annual review reminders)
To improve our services through aggregated, anonymized analytics

4. AI and Your Conversation

Your conversation with Novantis's AI assistant is used only to generate your documents during your session. Conversation content is not used to train AI models. Session data is encrypted at rest. After document generation, conversation transcripts are retained for 90 days for support purposes, then deleted.

5. How We Share Your Information

We do not sell your personal information. We share it only with:

Stripe — to process payments. Stripe's privacy policy governs their use of payment data.
Supabase — our database infrastructure provider, operating under strict data processing agreements.
Resend — to deliver transactional emails on our behalf.
AI providers (Google Gemini, Anthropic Claude, OpenAI) — to power our estate planning assistant. These providers process your session data under their respective data processing agreements and do not use your data to train their models under our enterprise agreements.
Law enforcement or government bodies when required by law.

6. Age Requirement

Novantis is for adults 18 and older. We verify age at signup. If we learn a user is under 18, we delete their account immediately with no data retained.

7. Data Retention

We retain your account data and documents as long as your account is active. If you delete your account, we delete your profile, documents, and named party data within 30 days. Payment records are retained for 7 years to comply with financial regulations.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your account and associated data
Export your data in a portable format
Opt out of non-essential communications

To exercise these rights, use the account deletion feature in your dashboard settings or contact us at privacy@novantis.com.

9. Security

We use industry-standard encryption (AES-256) for data at rest and TLS 1.3 in transit. Document content is encrypted before storage. Access is protected by row-level security policies enforced at the database level. We conduct annual security reviews.

10. Changes to This Policy

We may update this policy from time to time. We will notify you by email and display a banner on your next login when material changes are made. Continued use of Novantis after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Contact us at privacy@novantis.com.