Noviram Privacy Policy
Last updated: 14 October 2026
This policy explains what personal data Noviram Outreach processes, why, and what rights you have. Noviram Outreach is operated by Noviram Digital Kft., a company registered in Hungary (registered office: [REGISTERED ADDRESS], company registration number: [CÉGJEGYZÉKSZÁM], tax number: [ADÓSZÁM]) — "Noviram", "we", "us".
Questions or requests: privacy@noviramoutreach.com.
1. Two roles: our customers' data and their prospects' data
We process personal data in two different roles:
- As controller — for the data of our customers and website visitors: your account, billing, support requests and how you use the service.
- As processor on our customer's behalf — for the business contacts ("prospects") our customers research and email with Noviram Outreach. Here the customer decides whom to contact and why, and is the controller; we process that data only on their instructions, under our data processing terms.
2. Data we process about our customers
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Name, company, email address, password (stored only as a secure hash) | Create and run your account, sign-in, security | Contract (Art. 6(1)(b)) |
| Billing details: company name, address, VAT number, invoices, payment status (card data is handled by Stripe, never by us) | Payments, invoicing, tax and accounting duties | Contract; legal obligation (Art. 6(1)(c)) |
| Connected mailbox details (address, server settings, app password or access token — stored encrypted) | Sending your emails and reading replies to them | Contract |
| Your settings, offer description, leads, emails, replies and notes in the app | Providing the service | Contract |
| IP address, sign-up network, device and log data, bot-check results | Security, preventing abuse of the free trial, troubleshooting | Legitimate interest (Art. 6(1)(f)) |
| Messages you send us | Support | Contract; legitimate interest |
We send you emails about your account (confirmation, password reset, billing, important changes). We'll only send product news if you agree, and you can opt out at any time.
3. Data processed about prospects (on our customers' behalf)
When a customer uses Noviram Outreach, the service collects and processes business information about companies and their contact people, mainly from public sources: map listings, the company's own website, public company registers and news. This can include a company's name, address, phone number, generic or work email address, names and roles of people listed on the website, and the content of emails exchanged with them.
Our customers must have a lawful basis for contacting these people (usually legitimate interest in business-to-business communication), must respect opt-outs and the rules of the recipient's country. Every email sent through the service contains an opt-out line, and addresses that unsubscribe or bounce are blocked from further emails by that customer.
If you received an email sent with Noviram Outreach and want to know where your data came from or have it removed, reply to that email or write to the sender — they are responsible for it. You can also contact us at privacy@noviramoutreach.com and we will pass your request on and help.
4. Service providers (sub-processors)
We use carefully selected providers to run the service. They may only use the data to provide their service to us.
| Provider | Purpose | Location |
|---|---|---|
| [HOSTING PROVIDER — e.g. Railway] | Servers and database | [REGION] |
| OpenAI | AI research and writing (API data is not used to train their models) | USA* |
| Stripe | Payments, invoices, subscriptions | EU / USA* |
| Resend | Account emails (confirmation, password reset) | USA* |
| Google (Maps Platform, Safe Browsing) | Business search; checking links for malware | USA* |
| Cloudflare (Turnstile) | Bot protection on sign-up | Global* |
| Your own mailbox provider | Sending and receiving your emails | Chosen by you |
* Transfers outside the EEA are protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.
5. How long we keep data
- Account and in-app data: while your account is active. After you close it, we delete it within 30 days (backups within 90 days).
- Invoices and accounting records: 8 years, as Hungarian accounting law requires.
- Security and abuse-prevention records (e.g. which network already used a free trial): up to 12 months.
- Do-not-contact lists (addresses that unsubscribed): kept as long as the customer's account exists, so those people are never contacted again.
6. Security
Data is transferred over encrypted connections. Passwords are stored as one-way hashes, mailbox passwords and access tokens are encrypted, and each customer's data is kept separate from every other customer's. Access inside Noviram is limited to people who need it.
7. Your rights
Under the GDPR you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent where processing is based on it. Write to privacy@noviramoutreach.com; we answer within one month.
You can also complain to the Hungarian data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11., naih.hu — or to the authority in your own EU country.
8. Cookies
This website and the app use only cookies that are needed to work — for example to keep you signed in. We don't use advertising or tracking cookies. If that changes, we'll ask for your consent first.
9. Children
Noviram Outreach is a business service and is not meant for anyone under 18.
10. Changes
If we change this policy in a meaningful way, we'll tell customers by email or in the app before the change applies.