Privacy Policy

Last updated: January 26, 2026

1. Introduction

NBAI LLC ("Company," "we," "us," or "our") operates the Nova Blaze AI website (www.novablaze.ai) and provides AI voice agent services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

By using our Services, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide when you:

  • Create an account: Name, email address, phone number, company name, business information
  • Use our Services: Customer data, call recordings, conversation transcripts, business workflows, integration credentials
  • Contact us: Name, email, phone number, message content
  • Make payments: Billing information (processed securely through third-party payment processors)

2.2 Information Collected Automatically

When you use our Services, we automatically collect:

  • Usage data: Pages visited, features used, time spent, click patterns
  • Device information: IP address, browser type, operating system, device identifiers
  • Cookies and tracking: Session cookies for authentication and functionality
  • Call data: Call duration, timestamps, caller information, conversation outcomes

2.3 Information from Third Parties

We may receive information from:

  • Your CRM, phone system, or calendar integrations
  • Payment processors
  • Business verification services

3. How We Use Your Information

We use your information to:

  • Provide Services: Deploy, operate, and maintain your AI voice agents
  • Process transactions: Handle billing, payments, and subscription management
  • Improve Services: Analyze usage patterns, train AI models, optimize performance
  • Customer support: Respond to inquiries, troubleshoot issues, provide assistance
  • Communications: Send service updates, security alerts, and marketing messages (with your consent)
  • Security: Detect fraud, prevent abuse, protect our systems
  • Legal compliance: Comply with applicable laws and regulations

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

Third-party vendors who perform services on our behalf:

  • Cloud hosting providers (data storage and processing)
  • Payment processors (billing and transactions)
  • Communication services (email, SMS delivery)
  • Analytics providers (usage insights)

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

  • Valid legal processes (subpoenas, court orders)
  • Government requests
  • Protection of our rights, property, or safety
  • Emergency situations involving safety or security

4.4 With Your Consent

We may share your information with third parties when you explicitly consent or direct us to do so.

5. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
  • Access controls: Role-based access, multi-factor authentication
  • Regular audits: Security assessments and penetration testing
  • Monitoring: 24/7 system monitoring and intrusion detection
  • Employee training: Security awareness and data handling protocols

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy:

  • Account data: Retained while your account is active plus 30 days after termination
  • Call recordings: Retained for 90 days unless otherwise specified in your service agreement
  • Transaction records: Retained for 7 years for tax and legal compliance
  • Analytics data: Aggregated and anonymized data may be retained indefinitely

You may request deletion of your data at any time, subject to legal retention requirements.

7. Your Privacy Rights

7.1 General Rights

You have the right to:

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing of your information
  • Restriction: Request restriction of processing
  • Withdraw consent: Withdraw previously given consent

7.2 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.

7.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information we collect, use, and disclose
  • Right to delete your personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your rights

7.4 Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or as required by applicable law).

8. Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Essential cookies: Required for authentication and core functionality
  • Functional cookies: Remember your preferences and settings

You can control cookies through your browser settings. Disabling cookies may limit functionality.

9. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

10. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child, we will delete it immediately.

11. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Sending an email notification
  • Displaying a prominent notice in our Services

Changes take effect 30 days after notification. Your continued use of our Services after changes take effect constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:

NBAI LLC
Email: [email protected]
Website: www.novablaze.ai

Data Protection Officer: [email protected]

14. Compliance

We comply with applicable data protection laws, including:

  • General Data Protection Regulation (GDPR) - European Union
  • California Consumer Privacy Act (CCPA) - California, USA
  • Health Insurance Portability and Accountability Act (HIPAA) - where applicable
  • Telephone Consumer Protection Act (TCPA) - USA