Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase at https://noovid.com (the “Site”). This site is maintained and operated by Noovid LLC, a limited liability company incorporated in the State of Delaware, United States, with its registered office at 254 Chapman Rd, Ste 208 #27698, Newark, Delaware 19702, United States. Noovid LLC is the controller of the personal data described in this Policy.

1. Data we collect and reasons for collection

Our site collects and uses some personal data from our users, as detailed in this section.

1.1 Personal data expressly provided by the user

We collect the following personal data provided by users when using our site:

- Full name;

- Email address;

- Phone number;

- Date of birth;

- Tax identification number;

- Avatar;

- Contact messages;

- Social media channels;

- Address;

- Payment method;

- Personal videos.

This data is collected at the following times:

- When the user registers on the site;

- When the user changes profile details;

- When the user uses the contact form;

- When the user makes payments.

The data provided by users is collected for the following purposes:

- So that the user can have a registered account;

- So that the user can purchase our services or provide services;

- So that the user can contact us;

- So that we can send offers to our users;

- So that we can send operational and transactional notifications about the user's account and projects — such as status updates, invitations, delivery reminders, revision requests, and payment confirmations — by email, through the platform, or via WhatsApp, using the phone number provided. These communications arise from the performance of the contract with the user and the regular operation of the platform.

1.2 Communications via WhatsApp

By providing your phone number and agreeing to receive communications by WhatsApp, the user consents to Noovid sending messages related to their account and projects through the WhatsApp Business Platform, operated by Meta Platforms. The user may withdraw this consent at any time by adjusting their preferences on the platform or by replying to the WhatsApp conversation itself, without prejudice to the use of Noovid's other features. Noovid uses WhatsApp exclusively for operational and transactional communications related to the user's account and projects. We do not send promotional or advertising messages through this channel.

2. Sensitive data

We do not collect sensitive data from our users, as defined in Article 9 of the General Data Protection Regulation (GDPR). Therefore, there will be no collection of data on racial or ethnic origin, religious belief, political opinion, membership of a union or of a religious, philosophical, or political organization, data related to health or sexual life, or genetic or biometric data when linked to a natural person.

3. Cookies

Cookies are small text files automatically downloaded to your device when you access and browse a website. They serve, essentially, to identify users' devices, activities, and preferences.

Cookies do not allow any file or information to be extracted from the user's hard drive, nor do they allow access to personal information that has not originated from the user or from how they use the site's resources.

3.1 Site cookies

Site cookies are sent to the user's computer or device exclusively by the site. The information collected through these cookies is used to improve and personalize the user experience, remembering preferences and choices, as well as to offer personalized content.

3.2 Third-party cookies

Some of our partners may set cookies on the devices of users who access our site. These cookies are intended to enable our partners to offer their content and services to the user in a personalized way, by obtaining browsing data extracted from the user's interaction with the site.

For more information about third-party cookies and how the data obtained is processed, please visit:

- PostHog: [PostHog Privacy Policy](https://posthog.com/privacy)

- Meta: [Meta Privacy Policy](https://www.facebook.com/privacy/policy)

- Google Analytics: [Cookie Usage by Google Analytics](https://developers.google.com/analytics/devguides/collection/gajs/cookie-usage)

The entities responsible for collecting cookies may transfer the information obtained to third parties.

3.3 Cookie management

The user may object to the registration of cookies by the site by disabling this option in their browser. More information on how to do this in some of the main browsers can be accessed at the links below:

- [Internet Explorer](https://support.microsoft.com/pt-br/help/17442/windows-internet-explorer-delete-manage-cookies)

- [Safari](https://support.apple.com/pt-br/guide/safari/sfri11471/mac)

- [Google Chrome](https://support.google.com/chrome/answer/95647?hl=pt-BR)

- [Mozilla Firefox](https://support.mozilla.org/pt-BR/kb/ative-e-desative-os-cookies-que-os-sites-usam)

- [Opera](https://www.opera.com/help/tutorials/security/privacy/)

Disabling cookies may affect the availability of some site features and compromise its correct operation. Another possible consequence is the removal of the user's saved preferences, which may impair their experience.

This site uses cookies to personalize content and ads, provide social media features, and analyze our traffic. We also share information about your use of our site with our social media, advertising, and analytics partners, who may combine it with other information that you have provided to them or that they have collected through your use of their services.

Cookies are small text files that can be used by websites to make the user experience more efficient.

The law allows us to store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.

This site uses different types of cookies. Some cookies are placed by third-party services that appear on our pages.

You can change or revoke your consent to the use of cookies at any time on our site.

Learn more about who we are, how to contact us, and how we process your personal data in our Privacy Policy.

Please provide your ID and consent date when contacting us to manage your consent.

Your consent applies to the following domains: noovid.com

4. Collection of data not expressly provided for

Occasionally, other types of data not expressly provided for in this Privacy Policy may be collected, provided that they are supplied with the user's consent or that the collection is permitted on another legal basis established by law.

In any case, the data collection and the processing activities arising from it will be communicated to the site's users.

4.2 Sharing personal information with third parties

We do not sell your personal data. We may, however, share it with service providers that act as processors on our behalf, strictly to the extent necessary for the operation of the platform, such as: infrastructure and hosting providers; payment processing providers; analytics tools; and Meta Platforms, for sending messages via the WhatsApp Business Platform. These providers process the data in accordance with our instructions, this Policy, and applicable data protection law, and are prohibited from using it for their own purposes. Nevertheless, we may share data to comply with a legal or regulatory requirement, or to comply with an order issued by a public authority.

Some of the service providers mentioned above may be located, or maintain servers, outside your country of residence and outside the European Economic Area and the United Kingdom. In those cases, the international transfer of personal data is carried out in accordance with the requirements of the GDPR, subject to appropriate safeguards, such as the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

4.3 How long your personal data will be stored

The personal data collected by the site is stored and used for a period of time corresponding to what is necessary to achieve the purposes listed in this document, taking into account the rights of the data subjects, the rights of the site's controller, and the applicable legal or regulatory provisions.

Once the personal data storage periods have expired, the data is removed from our databases or anonymized, except in cases where storage is possible or necessary due to a legal or regulatory provision.

4.4 Legal bases for processing personal data

Each personal data processing action must be supported by a legal basis, that is, a justification provided for in Article 6 of the GDPR. We rely on the performance of a contract with you, compliance with a legal obligation, our legitimate interests in operating and securing the platform, and your consent for analytics and marketing cookies and for marketing communications.

All of our personal data processing activities are based on a legal basis permitted by law. For more information about the legal bases we use in specific personal data processing operations, please contact us through the channels listed at the end of this Policy.

5. User Rights

The site's user has the following rights as established by the GDPR:

- Confirmation of the existence of data processing;

- Access to their personal data;

- Correction of incomplete, inaccurate, or outdated data;

- Anonymization, blocking, or deletion of unnecessary or excessive data, or of data processed in violation of the law;

- Portability of data to another service or product provider, upon express request, in accordance with the regulations of the national authority and subject to commercial and industrial secrets;

- Deletion of personal data processed with the data subject's consent, except in the cases provided for by law;

- Information about the public and private entities with which the controller has shared data;

- Information about the option not to give consent and the consequences of refusal;

- Withdrawal of consent.

The right to erasure is not absolute: we may keep personal data where we are required or permitted to do so by law, or where we need it to establish, exercise, or defend legal claims.

Because Noovid LLC is established in the United States, personal data is transferred outside the European Economic Area and the United Kingdom. We make those transfers under the European Commission's Standard Contractual Clauses (and the UK Addendum where relevant) or another lawful transfer mechanism, together with supplementary technical and organizational measures. You may request a copy of the safeguards we use through the contacts at the end of this Policy.

5.1 How the Data Subject Can Exercise Their Rights

To ensure that the user who wishes to exercise their rights is, in fact, the holder of the personal data in question, we may request documents or other information that help with their correct identification, in order to protect our rights and those of third parties. This will only be done if absolutely necessary, and all relevant information will be provided to the requester.

6. Security Measures in the Processing of Personal Data

We implement appropriate technical and organizational measures to protect personal data against unauthorized access and situations of destruction, loss, misplacement, or alteration of such data.

The measures we adopt take into account the nature of the data, the context and purpose of processing, the risks that a potential breach would pose to the user's rights and freedoms, and the standards currently used in the market by companies similar to ours.

Among the security measures we have adopted, we highlight:

- Storage of passwords using cryptographic hashes;

- Restrictions on database access;

- Monitoring of physical access to servers;

- Restrictions on access to user details;

Although we do our utmost to prevent security incidents, a problem caused solely by a third party may occur - such as in the case of attacks by hackers or crackers, or in the case of the user's sole fault, such as when they themselves transfer their data to a third party. Thus, although we are generally responsible for the personal data we process, we disclaim liability should an exceptional situation such as these occur, over which we have no control whatsoever.

In any case, should any type of security incident occur that could create a relevant risk or harm to any of our users, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it, and will notify those affected where the breach is likely to result in a high risk to their rights and freedoms, in accordance with Articles 33 and 34 of the GDPR.

7. Complaint to a Supervisory Authority

In addition to other administrative or judicial remedies, data subjects who believe their rights have been violated have the right to lodge a complaint with the data protection supervisory authority of the Member State of their habitual residence, place of work, or the place of the alleged infringement — or, in the United Kingdom, with the Information Commissioner's Office.

8. Changes to this Policy

This version of the Privacy Policy was last revised on: 18/08/2026.

We reserve the right to change this policy at any time, especially to adapt it to possible changes on our site, whether through the introduction of new features or the alteration or removal of existing ones.

Each time a change occurs, we will notify our users of the changes.

9. How to contact us

To clarify any questions about this Privacy Policy or about the personal data we process, please contact our privacy team through one of the channels listed below:

Noovid LLC

254 Chapman Rd, Ste 208 #27698, Newark, Delaware 19702, United States

[email protected]