Privacy policy

Last updated: 2 September 2026

This is a translation for convenience. In case of discrepancy, theSpanish version prevails.

1. Who we are

The controller of your data is AAB1 — Javier Andres Alberdi Baptista, tax ID 2441214012, based in La Paz, Bolivia.

2. What data we handle

If you use the form: your name, your business name, your industry, your city, your WhatsApp number, your email and whatever you write in the message.

If you use the site assistant: the text of the conversation, the language, the page you wrote from and a technical identifier that cannot be traced back to your identity.

Measurement: if you accept the measurement notice, Google Analytics and the Meta pixel record which pages you visited and where you came from, with their own cookies. If you decline, neither is loaded and no third-party cookie is written.

3. The assistant is an artificial intelligence

It is not a person, and it says so if asked. Replies are generated with third-party models (Google Gemini and Anthropic Claude). Your message is sent to the provider solely to generate the reply and, under those providers' API terms, is not used to train their models. Do not write passwords, card numbers or sensitive data in the chat.

4. What we use it for

To reply to you, arrange a demo, prepare a proposal and improve the assistant. We do not sell or trade your data.

5. If you are a customer of a business using NovuChat

When you message a business that works with us, that business is the controller of your data. NovuChat acts as processor and follows its instructions. The channel is Meta's WhatsApp Business Cloud API. The assistant identifies itself as an AI and can hand you over to a person. To stop receiving messages, reply BAJA or block the number. Demonstration charges are always labelled as simulated.

6. How we protect your data

• All traffic is encrypted, with secure connection enforced in the browser.
• Data is stored encrypted on Google Cloud infrastructure.
• Every request is verified to tell a person from a bot.
• Rate limits prevent abuse of the assistant.
• No browser can reach our database: everything goes through our servers.
• Technical logs never store your email or phone number in the clear.
• Each business is isolated from the others, with rules tested automatically on every change.

7. Who we share it with

Google Cloud and Firebase (hosting, database, anti-fraud verification), our transactional email provider, the AI model providers (the query text only), Meta Platforms when the conversation happens on WhatsApp, Google and Meta if you accepted measurement, and the competent authority upon a legal request. Our servers are located in the United States.

8. Your rights

You can ask for access, correction or deletion of your data, and withdraw your consent at any time. Write to novuchat@novuchat.site and we reply within fifteen business days.

9. Retention

Assistant conversations and technical logs are deleted after ninety days. Contact details are kept while a commercial relationship exists or until you ask us to delete them.

10. Changes and applicable law

If we change this policy we update the date above. It is governed by the laws of the Plurinational State of Bolivia.