Privacy Notice

Who is responsible for your data

Novaire is operated by Pádraig O’Driscoll, based in Ireland, trading as Novaire. Pádraig O’Driscoll is the data controller for personal data processed through Novaire, under the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts.

For any privacy question or request, contact us at novaireireland@gmail.com.

What we collect and why

• Account details — name, email address and password (stored securely hashed). Used to create and secure your account. Legal basis: contract.
• Study profile — university, course, year, modules, exam dates and study preferences you enter. Used to personalise your plan. Legal basis: contract.
• Course material — recordings, slides, documents, notes and assignments you upload, and the notes, quizzes and answers generated from them. Used to provide the service. Legal basis: contract.
• Learning activity — quiz results, flashcard reviews, tutor questions and progress. Used for adaptive study features and usage limits. Legal basis: contract.
• Subscription status — plan, status and renewal dates received from Paddle. Used to give you Pro access. Legal basis: contract.
• Technical data — IP address, device and browser information, and logs. Used for security, fraud prevention and fixing problems. Legal basis: legitimate interests.
• Messages — what you send us when you get in touch. Used to help you. Legal basis: legitimate interests.

We do not sell your data and do not use your course material for advertising. Card details are collected by Paddle, not by us.

Who we share it with

• Service providers who host and run Novaire on our behalf: cloud hosting, database and file storage, AI model providers that process your material to generate study content, and email delivery.
• Paddle.com, our Merchant of Record, for selling Novaire Pro, subscription management, payments, tax compliance and invoicing. Paddle acts as an independent controller for payment data.
• Professional advisers, such as legal and accounting advisers, where needed.
• Authorities, where required by law.

International transfers

Some providers may process data outside the European Economic Area. Where this happens we rely on safeguards approved under GDPR, such as European Commission adequacy decisions or Standard Contractual Clauses.

How long we keep it

We keep your account data and course material while your account is active. When you delete your account, we delete or anonymise your data within 30 days, except where we must keep limited records longer to meet legal obligations. Technical logs are kept for a short period for security.

Your rights

You have the right to access, correct, delete, restrict or object to the processing of your data, to receive it in a portable format, and to withdraw consent where we rely on it. We respond within one month. You also have the right to complain to the Data Protection Commission in Ireland.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, private per-user storage for uploaded material, and access controls.

Cookies and local storage

Novaire uses only essential browser storage needed to keep you signed in and the service working. We do not use advertising or analytics cookies. You can clear this storage in your browser, but you will be signed out.

Changes

We may update this notice. If changes are significant, we will let you know before they take effect.