Skip to content
Legal

Privacy Policy

Privacy Policy

Effective date: 1 March 2026 Last updated: 1 March 2026

CeraNovaAI ("we", "us", "our") operates the ceranovaai.com website and related services. This Privacy Policy explains how we collect, use, and protect information when you use our website and services.

1. Information We Collect

Information you provide

  • Contact information: name, email address, company name when you contact us or submit a project brief.
  • Account information: email address when you create an admin account via invitation.

Information collected automatically

  • Usage data: pages visited, time spent, referral source, browser type, device type.
  • Cookies: session cookies for authentication and preferences. No third-party tracking cookies.

2. How We Use Information

We use collected information to:

  • Respond to enquiries and project briefs.
  • Provide and maintain our services.
  • Authenticate admin users.
  • Improve our website and services.
  • Comply with legal obligations.

3. Data Storage & Security

All data is stored in Supabase-hosted PostgreSQL databases with encryption at rest. Authentication uses OTP email verification. Admin access is governed by role-based access control (RBAC) with audit logging.

We do not sell, rent, or share personal information with third parties for marketing purposes.

4. Data Retention

  • Contact form submissions are retained for the duration of any resulting business relationship plus 2 years.
  • Account data is retained while the account is active. Inactive accounts are reviewed annually.
  • Audit logs are retained indefinitely for compliance purposes.

5. Your Rights

You have the right to:

  • Access your personal data.
  • Request correction of inaccurate data.
  • Request deletion of your data (subject to legal retention requirements).
  • Withdraw consent for optional data processing.

To exercise these rights, contact us at hello@ceranovaai.com.

6. Cookies

We use essential cookies only:

  • Session cookie: maintains your authenticated session.
  • Theme preference: stores your light/dark mode preference.

No analytics or advertising cookies are used.

7. Third-Party Services

We use the following third-party services:

  • Supabase: database hosting, authentication, and file storage.
  • Vercel: website hosting and deployment.

Both services maintain their own privacy policies and comply with industry security standards.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

9. Contact

For privacy-related enquiries: Email: hello@ceranovaai.com Location: Sydney, Australia