Privacy Policy
Effective: June 2026.
This policy explains what information Novangel collects when you use this website, how we use it, who we share it with, and what choices you have.
1. Information we collect
Information you give us
When you submit the contact form on the site, we collect the fields you fill in. That typically includes name, email, phone (optional), business name, your current website URL, industry, city, and anything you write in the message field.
Information we collect automatically
- Basic analytics. Page views, referrers, country-level location, and device/browser type, collected through privacy-respecting analytics (Google Analytics 4 and/or Cloudflare Web Analytics).
- Server logs. Standard request logs (timestamp, IP address, user agent, requested path) kept for a short retention window for abuse prevention.
- A single anonymous analytics cookie, or the cookieless equivalent. See the Cookie Policy for details.
Information from cold-email recipients
If you received a cold email from us, your business name, website, and a public business email address were collected from publicly available sources before we contacted you. You can opt out at any time using the unsubscribe link in the email - that flips a "do not contact" flag on your record so you won't receive another email from us.
2. How we use it
- To reply to your inquiry.
- To prepare a free website review or proposal.
- To follow up about a project or quote you asked for.
- To send transactional messages related to a project you've hired us for (kickoff, drafts, invoices).
- To run light analytics so we can understand which pages are useful.
- To detect and prevent abuse, spam submissions, and fraud.
3. What we don't do
- We don't sell, rent, or trade your personal information.
- We don't add you to a marketing newsletter or recurring blast unless you explicitly opt in.
- We don't run retargeting or advertising trackers off your form submission.
- We don't share your form contents with anyone outside Novangel except the third-party providers below, who process the data on our behalf.
4. Third-party processors
We rely on a small set of vendors to run the site. They process information on our behalf, under their own privacy and security controls.
| Vendor | What they handle |
|---|---|
| Cloudflare | Hosts the website and protects it from abuse. |
| Supabase (Postgres) | Stores form submissions and lead records. US-hosted. |
| Google Workspace / Gmail | Email correspondence storage and delivery. |
| Google Analytics 4 (if enabled) | Aggregate site analytics. IP anonymization is on. |
| Stripe (or other payment processor) | Handles invoice payment if you become a paying client. We never see your full card number. |
5. Data retention
- Form submissions- kept for as long as we have an active relationship with you, plus up to 24 months afterwards. After that they're deleted or anonymized.
- Cold-email lead records- kept until you unsubscribe or request deletion. Unsubscribed records keep a minimal flag so we don't contact you again, but the rest of the record is purged.
- Analytics data- retained per the analytics provider's default (typically 14 months).
- Server logs - retained for ~30 days for abuse prevention.
6. How we protect it
- Form submissions are stored with row-level security enabled. The public anon key cannot read or write the table - every write happens server-side through a service-role key that never reaches the browser.
- All traffic to and from the site is encrypted in transit.
- Database backups are encrypted at rest by our provider.
- Access to admin tooling requires authentication and is restricted to Novangel staff.
No system is perfectly secure. If we ever experience a breach that affects your personal information, we'll notify you as required by applicable law.
7. Your rights
Wherever you live, you can email hello@novangel.net to ask what information we have about you, correct anything that's wrong, request deletion of your record, or opt out of future cold emails (the unsubscribe link in any email also does this instantly).
If you live in California, you have specific rights under the CCPA/CPRA - to know, to delete, to correct, and to opt out of any "sale" or "sharing" of your information. We don't sell or share personal information for cross-context behavioral advertising, but you can exercise the other rights via email. We won't discriminate against you for exercising any of these rights.
If you live in the EU/UK, our lawful basis for processing is (a) our legitimate interest in responding to your inquiry or in B2B outreach to publicly listed business contacts, or (b) the contract we have or are forming with you. You have the right to access, correct, delete, restrict processing, object, and to data portability, and to lodge a complaint with your local data-protection authority.
We respond to verified rights requests within 30 days.
8. Children
The site isn't directed at children under 13, and we don't knowingly collect information from them. If you believe we have, email us and we'll delete it.
9. International transfers
We're based in the United States and our vendors are predominantly US-based. If you're contacting us from outside the US, your information will be transferred to and processed in the US.
10. Changes to this policy
We may update this policy from time to time. The "Effective" date at the top will reflect the latest version. Material changes will be called out at the top of the page for at least 30 days.
11. Contact
Privacy questions or to exercise any right above: hello@novangel.net.
Mail: Novangel, 11709 Roe Ave, Ste D PMB 1007, Leawood, KS 66211.