Novra AI is a brand operated by an individual entrepreneur registered in Georgia. This policy explains how Novra AI ("we," "us") processes personal data through this website and the Novra AI hotel enquiry and revenue recovery service. The operator's full registered legal name and legal notice details require owner confirmation before payment checkout is enabled.
1. Our roles
We act as a controller for data used to operate our website, respond to sales and support requests, manage customer relationships, bill customers, secure our service, and meet legal obligations.
We generally act as a processor when a hotel customer uses Novra AI to process guest, prospective guest, event organizer, or other enquiry data on the hotel's instructions. The hotel remains the controller for that data. The parties will enter into a data processing agreement where required.
2. Data we collect
Website and contact data
- name, business email, company, role, and message content you provide;
- demo-booking details submitted to the external booking provider;
- support communications and related records; and
- basic technical logs such as IP address, browser information, request time, and security events that our hosting environment may generate.
Customer account and commercial data
- hotel and staff contact information;
- contract, configuration, support, and billing records;
- authorized-user and access information, where applicable; and
- service activity needed to operate, troubleshoot, and secure the deployment.
Hotel enquiry data processed for customers
Depending on the configured workflow, enquiry content may include a person's name, contact details, requested stay dates, party size, room preferences, meeting or event details, company or group information, free-text message content, follow-up communications, staff assignments, and available booking outcome data.
Customers should not configure the service to process special-category data, payment-card details, identity documents, or other unnecessary sensitive data unless the parties have expressly assessed and agreed the lawful need and appropriate safeguards.
3. Why we process data
- to respond to enquiries and provide demos;
- to enter into and perform customer contracts;
- to configure, operate, support, and secure the software;
- to process hotel enquiries on a customer's documented instructions;
- to classify supported booking intent, identify configured information gaps, route work, and support follow-up;
- to maintain business, billing, security, and compliance records; and
- to establish, exercise, or defend legal claims and comply with law.
4. Legal bases
Where the GDPR or UK GDPR applies and we act as controller, we rely on performance of a contract or steps requested before a contract, legitimate interests in operating and securing a B2B software business, compliance with legal obligations, and consent where consent is the appropriate basis. Our legitimate interests do not override applicable individual rights.
For hotel enquiry data processed as a processor, the hotel determines the legal basis and provides instructions. Hotels are responsible for notices, consent where required, and handling data-subject requests, while we provide reasonable contractual assistance.
5. Service providers and subprocessors
We may use providers for cloud hosting, AI models or APIs, email and communications, monitoring and security, booking, support, and payment processing. The public demo-booking link currently directs visitors to Calendly, which processes data under its own privacy terms.
The specific production hosting, AI model/API providers, data locations, retention controls, and subprocessor list depend on the customer deployment and require final technical confirmation. They will be disclosed in the customer's data processing documentation before live guest data is processed. We do not claim that provider handling is training-free, zero-retention, or EU-only unless the applicable deployment contract confirms it.
6. International transfers
Novra AI is operated from Georgia, and service providers may process data in other countries. Where restricted personal data is transferred from the EEA, UK, or Switzerland to a country without an applicable adequacy decision, the parties will use an appropriate transfer mechanism, such as approved standard contractual clauses, and supplementary measures where required. Exact transfer mechanisms must be documented for each deployment.
7. Retention
We retain controller data only as long as reasonably needed for the purposes described above, including contract administration, support, security, tax, accounting, and legal obligations. Hotel enquiry data is retained according to the customer's documented instructions and the agreed retention schedule, then deleted or returned subject to legal and technically necessary backup retention.
Final category-specific retention periods have not yet been approved and must be added to customer-facing documentation before production onboarding.
8. Security
We use reasonable technical and organizational measures appropriate to the nature and risk of the data, including access controls, least-privilege practices, environment separation where applicable, logging, and protected data transmission. No system is completely secure. We do not claim certifications, specific encryption standards, or guaranteed incident-prevention outcomes that have not been independently verified.
9. Cookies and analytics
The current public website does not intentionally deploy non-essential analytics or advertising cookies. Hosting infrastructure may use essential technical storage or logs for delivery and security. Following the external demo-booking link takes you to a third party that applies its own cookie and privacy practices. If we add non-essential analytics, we will update this notice and request consent where required.
10. Automated processing
The product uses AI-assisted classification and extraction to support hotel enquiry workflows. Hotels can configure staff review and escalation. Novra AI is not intended to make legal or similarly significant decisions about individuals solely by automated means. A hotel remains responsible for final booking decisions and appropriate human oversight.
11. Your rights
Depending on applicable law, individuals may have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent, and complain to a supervisory authority. These rights can be limited by law.
For data submitted to a hotel, contact the hotel first because it is usually the controller. We will assist the hotel as required. For data controlled by Novra AI, email [email protected]. We may need to verify identity before responding.
12. Children
The website and service are offered to businesses and are not directed to children. Hotel customers must ensure their use of the service, including any processing of minor guest data, complies with applicable law and the agreed instructions.
13. Changes and contact
We may update this policy to reflect changes in our practices or legal obligations. Material changes will be communicated where required. Privacy questions and requests can be sent to [email protected]. Novra AI is operated by an individual entrepreneur registered in Georgia.