Privacy Policy

1. Who is responsible for your data

The controller of your personal data is Novara Management IK, trading as NexNovara, an individual merchant (individuālais komersants) registered in the Latvian Commercial Register under registration number 40002230834, with its registered address at Krāslavas iela 42 - 15, Rīga, LV-1003, Latvia. As controller, we decide why and how your data is used.

For anything about your data, email contact@nexnovara.com. Writing "Privacy" in the subject line helps it reach the right person quickly.

2. The short version

We collect only what we need to run this website and to review applications. We do not sell personal data, we do not share it with advertisers, and we use no advertising or tracking cookies.

A person on our team reads every application. You can ask for a copy of your data, or ask us to delete it, at any time.

3. When you visit the website

Hosting logs. When you open a page, our host receives the technical data your browser sends: IP address, browser and device type, the page requested and the time. We use it to deliver the site, keep it secure and fix errors. Legal basis: our legitimate interest in a secure, working website (GDPR art. 6(1)(f)). These logs are kept for no longer than 30 days.

Page view counts. We count page views with Vercel Web Analytics. It sets no cookies, stores nothing on your device and does not identify you or follow you to other websites. We see only totals, such as how many visits a page had and from which countries and types of device. Legal basis: our legitimate interest in knowing which pages are useful (art. 6(1)(f)).

Your language choice. If you pick a language, we remember it in a cookie named nn-lang for one year, and in your browser's local storage, so the site opens in your language next time. Our Cookie Policy lists everything the site stores on your device.

4. When you apply to work with us as a creator

What we collect. The form on our Apply page asks about your niche, whether you are comfortable showing your face, and confirms that you are 18 or older. It also asks for your Instagram handle, follower range and how often you post; your main platform and handle; your subscriber and monthly revenue ranges; the hours you can commit; any current agency contract and when it ends; your income goal; your biggest challenge; anything you will not do; your first name or the name you go by; your country and languages; your email; and a Telegram handle or other contact if you want to give one. Many questions are optional, and the form shows which.

How you found us. When you press send, the form may also attach how you heard about us (if you tell us), the website that sent you, the page you sent the form from, and any campaign tags in that page's address. These are read at that moment only; nothing is saved on your device beforehand to track you. We use this to learn which channels bring creators to us. Legal basis: our legitimate interest in understanding where applicants come from (art. 6(1)(f)).

Sensitive answers. Some answers can reveal information about your sex life, for example a niche such as fetish content, or the limits you describe. The law treats this as a special category of personal data (GDPR art. 9). We use it only with your explicit consent, which you give by ticking the consent box before you send the form (art. 9(2)(a)). The boundaries question is optional, and you can leave it empty.

Why we use it. To review your application, to look at the public profiles you name, to reply to you and, if we both want to go ahead, to prepare an agreement. Legal bases: your consent (art. 6(1)(a)) and steps you ask us to take before a possible contract (art. 6(1)(b)).

Withdrawing consent. You can withdraw your consent at any time by emailing contact@nexnovara.com. We then delete your sensitive answers, or your whole application if you ask. Withdrawal does not affect what we did before it, but without your answers we may not be able to finish reviewing your application.

Unfinished applications. While you fill in the form, your answers are kept in your browser's session storage (entry nn-apply-draft) so a reload does not lose them. It does not include your free-text answers (what you will not do, your biggest challenge). It never leaves your device until you press send, and it is deleted when you send the form or close the tab.

Adults only. You must confirm that you are 18 or older to send the form. If we agree to work together, we check your age before any work begins.

If the form cannot be sent. When the form cannot reach us, it offers to open an email with your answers addressed to contact@nexnovara.com. If you send that email, it travels through your email provider and ours, and we handle it like any other application.

How long we keep it. If we do not go ahead, we delete your application 6 months after our last contact with you, or sooner if you ask. If we sign an agreement, your application becomes part of your creator file, and the creator privacy notice you receive at onboarding explains how long we keep it.

5. When you apply for a job with us

If you apply for a role, by email or through a form, we collect what you send us: usually your name, contact details, CV, work history and anything in your message or answers. Please do not include sensitive details we have not asked for, such as health information.

We use it to assess your application and to contact you about the role. Legal basis: steps you ask us to take before a possible contract (art. 6(1)(b)).

If you do not get the role, we delete your application 6 months after the role is filled. If you agree, we keep it for up to 12 months so we can contact you about future roles. You can withdraw that consent at any time.

6. When you email us

If you email contact@nexnovara.com or message us another way, we receive your address or handle and whatever you write. We use it to answer you. Legal basis: our legitimate interest in replying to people who contact us (art. 6(1)(f)), or steps before a contract if you are asking about working with us (art. 6(1)(b)).

We keep messages as long as we need them to deal with your question, and delete them within 12 months of our last message, unless they become part of an agreement or we need them for a legal claim.

7. Who receives your data

We do not sell personal data and we do not share it with advertisers. The service providers below handle data for us as processors: they may use it only on our instructions and under a data processing agreement (GDPR art. 28).

Hosting: Vercel Inc. hosts this website. The functions that receive your application run in Frankfurt, Germany, and pages are delivered through Vercel's global network.

Applications: each application is delivered to our inbox by Resend, an email delivery service, and may also be saved in a spreadsheet or customer database that we use under a data processing agreement. If this is switched on, Resend also sends you a short confirmation email. It is the same fixed text for everyone and contains nothing you wrote in the form.

We treat an application as received only once the full application has reached our inbox or our data store. A chat notice never counts as receipt.

Team notices: our team may get a short chat message when an application arrives. It says only that a new application arrived, with the time and the form language. It contains no personal data: no name, country, Instagram handle, follower range, niche, boundaries, revenue, challenge or email.

Spam protection: to tell people from bots, the form may use Cloudflare Turnstile, which receives your IP address and basic browser data for that check.

Email: we read and answer email in a mailbox hosted by Zoho in its EU data centre.

Others, only when needed: our accountant and legal advisers, and authorities such as the State Revenue Service (VID) or a court where the law requires it.

8. Transfers outside the EU

Vercel, Resend and Cloudflare are US companies, so some data may be processed in the United States. For these transfers we rely on the EU-US Data Privacy Framework for certified companies (Commission Decision (EU) 2023/1795) or on the EU Standard Contractual Clauses (Commission Decision (EU) 2021/914). You can ask us for a copy of the safeguard that applies.

9. How we protect your data

Data travels over encrypted connections. Only the people on our team who review applications can see them. Application answers are never written to our server logs.

We never publish your legal name or location, and we never use an applicant's details in our marketing.

10. Your rights

You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, or give it to you in a common digital format so you can take it elsewhere. You can object to any use based on our legitimate interests, and you can withdraw any consent at any time (GDPR art. 7(3) and 15 to 21).

To use any of these rights, email contact@nexnovara.com. We reply within one month. If a request is complex, we may extend this by two more months, and we will tell you why within the first month. We may ask you to confirm who you are. Requests are free.

11. Complaints

If you are unhappy with how we handle your data, please tell us first so we can put it right.

You also have the right to complain to the Latvian data protection authority, the Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, Latvia, pasts@dvi.gov.lv, www.dvi.gov.lv, or to the data protection authority in the EU country where you live or work.

12. No automated decisions

We make no decisions about you by automated means alone, and we do not build profiles of visitors or applicants. A person on our team reads every application and decides. Our AI Policy explains how our team uses AI tools.

13. Adults only

This website and our services are for adults. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete it.

14. Changes to this policy

When we change this policy, we update the date at the top of the page. If a change affects how we use data you have already given us, we tell you before it applies wherever we can reach you.