Privacy Policy
Last updated: May 2026
Last updated: May 2026
NoviLink is operated by Novirel Group, registered in South Africa. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
We collect: your name, email address, phone number, username, profile information, documents uploaded to your personal shelf, device information for security purposes, usage data, and subscription information.
We collect your information to: operate and improve the platform, verify your identity, process subscription payments, provide customer support, send relevant notifications, prevent fraud and abuse, and comply with legal obligations.
Your phone number is collected for account verification and security purposes only. It is never displayed publicly, never sold, and never shared with other users or third parties. It is stored encrypted in our database.
Documents uploaded to your personal shelf are encrypted at rest and stored in a private bucket. They are accessible only by you unless you choose to share them with another user through the in-chat document request system. NoviLink does not review or access your stored documents. You may delete your documents at any time. Documents are retained for 12 months after account deletion for fraud prevention purposes then permanently deleted.
When you share documents with another user in chat, those documents are private between you and that user only. NoviLink does not store, review, or have access to documents shared in chat threads.
We do not sell your personal information. We may share limited information with: Paystack to process subscription payments, and law enforcement if required by South African law.
You have the right to: access your personal information, correct inaccurate information, request deletion of your information, object to processing of your information, and lodge a complaint with the Information Regulator of South Africa.
Active account data is retained while your account exists. On account deletion, usage records and hashed identifiers are retained for 12 months for fraud prevention. All other personal data is deleted within 30 days of a deletion request.
We implement industry-standard security measures including row-level security on our database, encryption of sensitive data at rest, signed URLs with short expiry for document access, access logging for all document views, and secure transmission via HTTPS.
We collect device identifiers for security and fraud prevention. This data is not used for advertising purposes.
NoviLink is not intended for users under 18. We do not knowingly collect information from minors.
For privacy concerns or to exercise your POPIA rights contact: info@novirelgroup.com
You may lodge a complaint with the Information Regulator of South Africa at: info@novirelgroup.com