Privacy policy

Draft v0.1 · self-help draft · attorney review recommended.

1. Who we are

Novellum is a trading name of Carbon Disclosure SA (Pty) Ltd, registration 2009/023392/07, VAT 4490321819, of 5 Bethanie Street, Sonstraal, Durbanville, 7550, South Africa. We are registered with the South African Information Regulator, and our Information Officer can be reached at support@novellumbooks.com. We process personal information under POPIA and, where it applies to EU/UK buyers, the GDPR.

2. What we collect

• Order details: your email address, the hero name and brief you write, your chosen genres and length tier, and your order code.
• Payment: we never see or store your card details — our merchant of record processes payment under its own policy.
• Consent records: the checkout checkbox state, timestamp, terms version and a hashed IP.
• Technical basics: short-lived server logs with hashed IPs; cookie-free aggregate statistics.
• Anything you send us: support emails, feedback, ratings.

3. Why we use it

To produce, deliver and support your book; to meet legal duties (tax, consent, and EU AI Act Article 50 records); to keep the service secure; and, only if you opt in, to email you about Novellum. We do not sell personal information or build advertising profiles.

4. AI processing

Your brief and hero name are sent to hosted AI model providers (via OpenRouter, to providers such as Anthropic and OpenAI) to generate and quality-check your book. These providers do not use your brief or book to train their models. Briefs are screened automatically; a declined brief can be appealed by replying to the decline message.

5. Who we share it with

Only the providers who run Novellum: Railway (hosting), Cloudflare (domain, storage, email routing), Resend (delivery email), OpenRouter and the model providers behind it, and our merchant of record (payments).

6. Where it goes

Our providers run infrastructure in the EU and United States. We rely on POPIA section 72 and, for EU/UK buyers, GDPR transfer safeguards.

7. How long we keep it

• Brief and generation working files: deleted 90 days after delivery.
• Book files: kept at least 90 days, then deleted.
• Order and tax records: 5 years.
• Consent and AI-marking records: 5 years.
• Support correspondence: up to 2 years.

8. Your rights

Email support@novellumbooks.com to access, correct or delete your information, or object to a use of it. We answer within a month. You may also complain to the South African Information Regulator (enquiries@inforegulator.org.za) or your local EU/UK supervisory authority.

9. Children

Novellum is for buyers 18 and older. An order for a younger reader must come from a parent or guardian.

10. Security

Everything travels encrypted; book files are stored privately and delivered only through signed, expiring links; we hold no card data at all.

11. Cookies

Our own pages set no tracking or advertising cookies. Our merchant of record's checkout overlay may set its own strictly-functional cookies under its own policy.

12. Changes

We will post any change to this policy here with a new date. Current version: v0.1.