NovaflowAI

Enterprise Privacy Policy

Effective Date: January 1, 2026 | Last Updated: October 2026

1. Core Commitment: Zero Data Retention (ZDR)

Novaflow AI, Inc. ("Novaflow", "we", "our") processes enterprise data under a strict Zero Data Retention architectural guarantee. When our customers submit documents, payloads, or unstructured datasets to our multi-agent pipelines:

  • We do not use customer data or model inputs/outputs to train, re-train, or fine-tune foundational AI models (including Claude or proprietary weights).
  • Inference memory allocations are strictly ephemeral and released immediately upon execution completion.
  • Context cache lifetimes strictly comply with customer-specified TTL parameters.

2. Anthropic Commercial API Guarantee

All model execution relying on Anthropic’s Claude family (Sonnet, Haiku, Opus) is routed exclusively through Anthropic’s tier-1 commercial API endpoints under contractual commitments that guarantee no payload logging, no model training, and strict data isolation.

3. Information We Collect

For billing and account security, we collect minimal account administration data:

  • Business email address, organization name, and billing contact details.
  • Aggregated telemetry (API call counts, error rates, latency in milliseconds).
  • Cryptographic hashes of completion states for audit trail verification.

Contact Form

The contact form sends your name, work email, company, expected monthly volume, use case, and notes by email through Cloudflare to the Novaflow team inbox. We use Cloudflare Turnstile for anti-spam verification and Email Routing for email delivery.

We use these details only to reply to and follow up on your enquiry. We do not sell them or use them for marketing lists. We keep them only as long as needed for that purpose and delete them on request via privacy@novaflowai.tech.

4. Compliance Frameworks: GDPR, CCPA & HIPAA

Novaflow complies with the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Enterprise customers subject to HIPAA may execute a standard Business Associate Agreement (BAA) with Novaflow prior to routing protected health information (PHI).

5. Contact the Data Protection Officer

For questions regarding this policy or data processing agreements, contact our Data Protection Officer at:
privacy@novaflowai.tech