Privacy Policy
Effective Date: March 27, 2026
Novus Forge ("we," "us," or "our") operates the novus-forge.com website and the Novus Forge AI governance platform (collectively, the "Services"). This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our Services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Services.
1. Information We Collect
1.1 Information You Provide Directly
- Contact form submissions: name, email address, company name, and message content
- Demo requests: name, email, company, and use case description
- Business correspondence: emails, calls, and meeting notes related to sales and support
1.2 Information Collected Automatically
When you visit novus-forge.com, our hosting infrastructure (Vercel) may collect standard web server logs including:
- IP address (anonymized)
- Browser type and version
- Pages visited and time spent
- Referring URL
- Date and time of request
We do not deploy advertising trackers, third-party analytics SDKs, or behavioral tracking pixels on this website.
1.3 Platform Data (Enterprise Customers)
Enterprise customers who deploy the Novus Forge platform process data through their own tenant-isolated environment. Customer data processed through the platform is governed by the applicable Data Processing Agreement (DPA) between Novus Forge and the customer. We do not access customer agent data, document content, or ontology records except as required to provide contracted support services.
2. How We Use Information
We use the information we collect to:
- Respond to contact form submissions and demo requests
- Communicate with prospective and current customers about our Services
- Deliver Shadow Mode Audit reports to requesting organizations
- Improve the content and functionality of our website
- Comply with legal obligations
- Protect the security and integrity of our Services
We do not sell personal information. We do not use personal information for automated profiling or algorithmic decision-making that produces legal or similarly significant effects.
3. Information Sharing and Disclosure
We do not sell, trade, or rent personal information to third parties. We may share information only in the following circumstances:
Service Providers
We use Vercel for website hosting and Microsoft Office 365 for email. These providers process data on our behalf under data processing agreements and are not permitted to use your information for their own purposes.
Legal Requirements
We may disclose information if required to do so by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of Novus Forge, our customers, or the public.
Business Transfers
In the event of a merger, acquisition, or sale of substantially all assets, personal information may be transferred as part of that transaction. We will notify affected individuals via email or prominent notice on our website.
With Your Consent
We may share information with third parties when you have given explicit consent for us to do so.
4. Data Retention
We retain personal information only as long as necessary to fulfill the purpose for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
- Contact form submissions: retained for up to 2 years for follow-up communications
- Shadow Mode Audit data: prospect log data is deleted within 30 days of report delivery unless a longer retention period is agreed in writing
- Web server logs: retained by Vercel per their data retention policies (typically 30 days)
5. Security
We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These measures include TLS encryption for data in transit, access controls limited to personnel with a business need, and HMAC-SHA256 authentication for platform API calls. No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Your Rights
Depending on your jurisdiction, you may have rights regarding your personal information, including:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to legal obligations
- Portability: Request your information in a structured, machine-readable format
- Objection: Object to certain processing activities
- Withdrawal of Consent: Where processing is based on consent, withdraw that consent at any time
To exercise any of these rights, contact us at contact@novus-forge.com . We will respond within 30 days.
7. Cookies
This website does not use first-party cookies for tracking or analytics. Our hosting provider (Vercel) may set essential cookies necessary for site delivery and security. We do not use advertising cookies, remarketing pixels, or behavioral tracking cookies.
8. Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page and, where appropriate, providing additional notice. Your continued use of the Services after any changes constitutes acceptance of the updated policy.
10. Contact
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Novus Forge
contact@novus-forge.com