Privacy policy

The Octagon Oracle LLC, a Delaware limited liability company in the United States, operates Noviqor and is responsible for the personal information described here. Our support and privacy contact is shown on this page. This policy covers the Noviqor service, not independent websites, sportsbooks, payment-provider services, or copies other people make of content you publish.

Account and subscription information: your email address, a protected password hash rather than your readable password, session records, password-reset records, subscription status, billing identifiers, credit transactions, and records of terms you accept. Stripe collects payment information through its hosted pages. Noviqor does not collect or store your full card number or card security code.

Workspace information: notes, profiles, model names and contents, probabilities, factor relationships, folders, optimizer inputs and outputs, bankroll and unit settings, tracked bets and results, and sharing choices. This is information you enter, import, generate, or ask us to save. It can include information about other people if you include it.

Generation history: the initial AI-generated model, related request and pipeline information, usage and cost records, and subsequent structured edits. This lets us distinguish what the AI generated from what a user changed, investigate errors, and evaluate product quality. These records can contain your original notes and factor text; they are not the same as the lighter usage statistics described below.

Usage and technical information: account-linked feature visits, time spent actively using features, interaction counts, device category, session identifiers, request duration, job timing, error categories, and service usage. Our infrastructure may also process IP addresses, browser information, and security logs. The feature-usage collector is designed to count actions rather than record typed text or replay your screen.

Messages you send us: your email address, support correspondence, and attachments you choose to provide. Do not send passwords, complete payment-card details, or sensitive information that is not needed for the request.

We use information to create and secure your account, save and display your work, run analyses you request, provide sharing and exports, manage subscriptions and credits, send account emails, answer support requests, prevent abuse, and meet legal obligations. We also use performance statistics and generation/edit history to understand usability, investigate mistakes, and improve the service.

Where a law requires a legal basis, account services and requested processing are generally necessary to perform our agreement; fraud prevention, service security, support, and proportionate product improvement rely on legitimate interests, balanced against your rights; required recordkeeping relies on legal obligations. We request consent where it is required, and you can withdraw it for future processing. We do not treat accepting Terms as consent to every kind of tracking or marketing.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not run third-party advertising pixels in the app. If those practices change, we will update this notice and provide any required choices before starting them.

AI generation uses OpenRouter and the model providers serving the request. Relevant notes, event details, model content, and instructions are transmitted for processing when you request an AI feature. Providers may operate in other countries and apply their own retention and data-handling terms. Do not assume AI processing is entirely local, confidential professional advice, or subject to a universal zero-retention or no-training guarantee. Ask us if you need the provider details for a particular generation before sending sensitive material.

Stripe processes subscriptions and payments. Resend delivers account emails. Hosting, database, network, and storage providers help operate the service. Our contact mailbox provider processes support messages. We disclose information needed for those services, subject to applicable arrangements and law. The list of infrastructure providers can change as the service moves from development to hosted production.

Authorized personnel may access information when needed for support, security, administration, or the improvement purposes explained above. We may disclose information to comply with a valid legal requirement, protect rights and safety, or investigate fraud. In a business sale or reorganization, information may transfer subject to appropriate protections and any legally required notice.

Your private workspace is not a public directory. Sharing with another account gives that account the permission you choose. Publishing a public factor-map link makes the published map available without login to anyone who has the link, including people it is forwarded to. Content you publish may be copied or appear outside Noviqor.

You can revoke a public link in the factor map. Revocation prevents further access through that link, but cannot recall downloads, screenshots, or copies held by others. Review a map for personal or confidential information before making it public.

We use a session cookie to keep you signed in and browser storage for workspace preferences, onboarding progress, and session continuity. The feature-usage collector uses a session identifier to associate activity within a visit. Blocking cookies or clearing browser storage can sign you out or reset local preferences. It does not by itself delete server-side information.

Optional voice input uses your browser’s speech-recognition service after you choose to start it and grant microphone permission. Depending on your browser, audio may be sent to its speech provider. Noviqor’s notes feature receives the resulting text; it does not itself upload an audio recording to Noviqor’s servers. Text you keep becomes part of your notes. You can stop dictation, revoke microphone permission in your browser, or simply type instead.

We do not currently respond differently to a browser’s Do Not Track signal. We do not sell data or share it for cross-context behavioral advertising regardless of that signal. Contact us about objections to optional usage analysis or questions about browser storage. Reading this policy or agreeing to the Terms is not consent to optional tracking where separate consent is required.

We keep account and workspace information while it is needed to provide your saved workspace. Subscription cancellation alone does not delete it. You can request account deletion through Support. We may retain limited information needed for security, dispute handling, legal obligations, and accounting for the applicable period; access is restricted to those purposes.

Detailed feature-usage and operational telemetry is normally removed after 180 days by a daily cleanup process. This is not a 180-day deletion promise for your models, generation/edit history, subscription records, support messages, or backups. Those records are retained according to the purpose, account relationship, legal requirements, and need to investigate a problem. Backup copies can remain until their normal replacement cycle and must not be restored for ordinary use after a completed deletion request without reapplying that deletion.

Ask us for the retention details relevant to your request. We do not keep information indefinitely just because it might someday be useful, and will reassess records when their purpose ends.

You can edit workspace information in the app, change sharing settings, export supported content, and cancel renewal through Plans & billing. Email our privacy contact to request access to your personal information, correction, deletion, or a portable copy. Depending on the law that applies, you may also request restriction, object to processing based on legitimate interests, or withdraw consent. In particular, you may object to optional product-usage analysis.

We may need proportionate verification before disclosing or deleting account data. We will explain any lawful limits, respond within the applicable legal deadline, and will not unlawfully discriminate against you for exercising privacy rights. An authorized representative may contact us where the law permits, with proof of authority. If we decline a request, you may ask for review and complain to the privacy regulator that applies where you live, including the ICO in the UK or your EEA supervisory authority.

Deleting an account and canceling a subscription are different actions. If you want both, say so in your request so we can handle both. You do not need to buy a plan or send your password to make a privacy request.

We use access controls, protected passwords, scoped administrative access, and other safeguards appropriate to the service. No website, email system, or storage method can guarantee perfect security. Tell us promptly if you suspect a data or account-security problem.

We are based in the United States, and providers may process information there or in other countries. Privacy laws may differ from those in your location. Contact us for information about the recipients, processing locations, and transfer arrangements relevant to your data, including copies or details of applicable safeguards. Using Noviqor does not waive protections or transfer requirements that apply under your local privacy law.

Noviqor is for adults, not children under 18. We do not knowingly seek children’s personal information. If you believe a child has supplied it, contact us so we can investigate and delete it as appropriate.

We will update the date and version when this policy changes and provide additional notice of material changes where required. We will explain a materially different use of information before starting it and obtain consent where necessary. Our contact details can be updated without changing your existing privacy rights.