Privacy Policy

1. Who we are

The controller of the data described below is:

• Brand: Nuvora AI
• Location: Antalya, Türkiye
• Email: info@nuvoraai.io

2. Data collected through the demo form

When you submit the form we receive:

• Full name
• Business name and industry
• Phone number (WhatsApp)
• Email address (optional)
• Your free-text note (optional)
• The language you used, the date and time, and the page you came from

3. Chat assistant

Messages you write to the chat assistant are passed through our own server to our automation system so that a reply can be produced. A temporary session identifier generated in your browser, the page address and the language are sent along with the message. That identifier does not reveal your identity; it only keeps one conversation together.

Please do not enter identity numbers, health information or card details into the chat; it is meant for general pre-sales questions.

4. Technical logs and what we do not collect

Our hosting infrastructure keeps standard server logs (IP address, browser information, request time) so the site works and abuse can be prevented. These logs are not used for marketing.

We use no advertising cookies, tracking pixels or third-party ad networks. No health data, identity number or payment card information is collected through this site.

5. Why we process your data

Your data is not subjected to automated decision-making that produces legal effects concerning you.

6. Who we share your data with

We do not sell your data and do not share it with third parties for marketing. The following providers process data on our behalf so the service can run:

7. The legal basis for international transfers

Because these providers are located abroad, your data is transferred internationally to the extent required to deliver the service and under the contractual data protection commitments of each provider.

We may also disclose data where a competent authority makes a lawful request, to the extent the law requires.

8. Use of Google user data

Nuvora AI systems connect to the business’s own Google Calendar and Google Sheets account, using authorisation granted by that business. The access is used only to create appointments, read existing appointments and write appointment records to the relevant sheet.

Data obtained from Google accounts is not used for advertising, is not sold to third parties, and is not read by humans — except with the user’s explicit consent, for security investigations that cannot be avoided, to comply with applicable law, or where the data is fully anonymised.

Nuvora AI’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Access can be revoked at any time from the security settings of the relevant Google account.

9. How long we keep data

• Demo requests: up to 12 months if no call takes place, then deleted.
• Contact data of client businesses: for the term of the contract and the statutory limitation periods afterwards.
• Chat assistant records: up to 90 days, to improve the system.
• Server logs: for the hosting provider’s standard period (typically 30 days).

When the period ends, data is deleted, destroyed or anonymised.

10. Security measures

• The site and all form traffic are encrypted with HTTPS.
• Form and chat data never goes from your browser straight to the automation system; it passes through our own server over a connection protected by a secret key. The webhook address and key never appear in the page source.
• Requests reaching the automation system are rate limited, sanitised and checked for unauthorised access.
• Access rights are limited to the people who need them for their work.
• System components are backed up regularly and monitored automatically.

11. Cookies

We use no advertising or profiling cookies — only the technical cookies required for the site to work and the security cookies of our hosting provider. The chat assistant’s session identifier is kept in your browser’s own storage and ends when you close the tab.

You can block cookies in your browser settings; some parts of the site may then not work as expected.

12. Your rights

Under Turkish data protection law (Law No. 6698) you may ask us to:

• Confirm whether your personal data is being processed, and receive information about it,
• Explain the purpose of processing and whether the data is used accordingly,
• Identify the third parties to whom your data has been transferred at home or abroad,
• Correct data that is incomplete or inaccurate,
• Erase or destroy your data where the conditions for that are met,
• Notify third parties of any correction, erasure or destruction,
• Object to a result reached solely through automated analysis that works against you,
• Compensate damage arising from unlawful processing.

13. Contacting us and changes to this policy

Send your request to info@nuvoraai.io. We answer within 30 days at the latest, and may ask for additional information where we cannot verify your identity.

We may update this policy when our services or the applicable law change. The current version is always published on this page and the “last updated” date above is revised.