Privacy Policy · Novel Koncept

1. Introduction

This Privacy Policy explains how Novel Koncept, operated by The Upward Spiral, LLC, a Colorado limited liability company ("we," "us," or "our"), collects, uses, and shares information when you use our service (the "Service"). It applies to information we process about you as a user and customer.

By using the Service, you agree to the practices described here.

2. Information we collect

Information you provide.

Account information: name, email address, company name, and similar details
Business information you enter during onboarding: your website URL, business context, strategy, competitors, and related materials
Content and feedback you create or provide through the Service
Billing information, processed through our payment processor (we do not store full payment card numbers)
Communications you send to us

Information collected automatically.

Usage data: how you interact with the Service, features used, and actions taken
Device and log data: IP address, browser type, operating system, and similar technical information
Technical error reports, which may include the page involved, a timestamp, and diagnostic details
Cookies and similar technologies, as described in Section 7

Information from third parties.

Where you connect integrations (such as analytics or publishing platforms), we may receive information from those services as authorized by you
The content of the public web pages of the website you provide (your homepage and related pages), which the Service automatically retrieves and reads, along with publicly available information about your business, competitors, and market, gathered as part of the research the Service performs on your behalf

3. How we use information

We use information to:

Provide, operate, and maintain the Service
Perform the research, strategy, and content production the Service exists to deliver
Process payments and manage subscriptions
Communicate with you about your account, the Service, and updates
Improve and develop the Service
Detect, prevent, and address security issues, fraud, and abuse
Comply with legal obligations

4. How the content engine uses your data

The Service uses your business information and inputs to produce content for you. To do this, it automatically retrieves and reads the public pages of the website you provide (your homepage and related pages) and sends that page content, together with your inputs, to our AI subprocessors (Anthropic and Perplexity) to perform research, build strategy, capture voice, and generate content.

We do not use your private business content or Your Inputs to train foundational AI models. Your inputs and produced content are used to operate the Service for you. Any learning that improves quality is applied to your own account; it is not used to train general-purpose AI models and is not shared across customers.

Our AI providers, Anthropic and Perplexity, process the data we send them under their API terms and, under those terms, do not use API inputs to train their models.

We do not sell your personal information. We share information only as described here:

Service providers and subprocessors. We use trusted third parties to operate the Service. They process information on our behalf under contractual obligations and are not permitted to use it for their own purposes. Our current subprocessors are:
Anthropic — AI content generation
Perplexity — web research
Supabase — database and authentication
Stripe — payment processing
SendGrid — email delivery
Railway — application hosting
Google (Analytics and Search Console) — only if you connect your Google account
Webflow — only if you connect your Webflow account for publishing

We update this list as our providers change.

Integrations you authorize. When you connect a third-party platform, we share information as needed to make that integration work.
Legal requirements. We may disclose information if required by law, regulation, legal process, or governmental request.
Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
With your consent. We share information for other purposes with your consent.

6. Data retention

We retain your information for as long as your account is active and as needed to provide the Service. After you cancel, we keep your data in read-only form for 90 days so you can export it, then permanently delete it and confirm the deletion to you in writing.

We retain limited records longer where required by law or for legitimate business purposes (for example, billing records). Email delivery logs are retained for up to 12 months, and technical error logs for up to 90 days.

7. Cookies and tracking

Essential cookies. We use essential cookies and similar technologies to operate the Service and our website, such as keeping you logged in, remembering your preferences, recording your cookie choices, and protecting against abuse. Our payment processor may set cookies necessary to process payments. These are required for the site to function and are always active.

Analytics. On our website (novelkoncept.com) we use Google Analytics 4 to understand which pages people read and how the site performs, so we can improve it. Google Analytics sets first-party cookies (named _ga and _ga_*) and collects usage data such as pages viewed, approximate location, and device and browser type; this data is processed by Google on our behalf (see Google’s Privacy Policy), and we use it only in aggregate. We do not use advertising cookies, we do not track you across other websites, and we do not sell your personal information. We also use Cloudflare Web Analytics, which is privacy-first: it sets no cookies and collects no personal data.

Your choices. Analytics are enabled by default, and a notice appears on your first visit so you can opt out. You can decline or re-enable analytics at any time using the Cookie preferences link in the footer of every page. If you decline, we do not load Google Analytics at all, and we remove its cookies from your browser. You can also control cookies through your browser settings, though some features may not function properly without certain cookies.

8. Data security

We implement reasonable technical and organizational measures to protect information, including encryption of sensitive credentials and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your privacy rights

Depending on where you live, you may have rights over your personal information, including the right to know what we collect, to access or correct it, to delete it, and to receive a copy in a portable format.

California residents. If you are a California resident, you have the right to know, the right to delete, the right to correct, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising. We will not discriminate against you for exercising your rights.

How to exercise your rights. Email us at [email protected]. We may need to verify your identity using your account email. We aim to respond within 45 days; if we need more time, we will let you know. You may use an authorized agent to submit a request on your behalf.

10. Where your data is processed

Your information is processed and stored in the United States. The Service is intended for users in the United States and is not directed to residents of the European Economic Area, the United Kingdom, or other regions with separate data-transfer requirements.

11. Children's privacy

The Service is intended for business users who are at least 18 years old. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will post the revised policy on this page and update the effective date above, and where required by law we will notify you directly. Your continued use of the service after an update takes effect constitutes acceptance of the revised policy.

13. Contact

Questions about this Privacy Policy or our data practices can be directed to [email protected].

The Upward Spiral, LLC · Novel Koncept