Privacy

Last updated: 12 November 2026

1. Controller

Adam Bravo Chergui (Novexstate), Tax ID 50486994Q, Calle Aniceto, 30860 Puerto de Mazarrón (Murcia), España. Privacy contact: privacidad@novexstate.com.

2. Data, purposes and legal bases

• Account (name, email, password hashed with Argon2id, language): performance of contract.
• Business accounts (company name, VAT ID, VIES check): contract and tax obligations.
• Orders, payments, delivery and invoices: contract and legal obligations.
• Security and fraud prevention (IP, device, country, sign-in attempts): legitimate interest.
• Newsletter: your consent, which you can withdraw at any time.
• Google Analytics: only with your consent in the cookie banner.

3. Retention

Account data while your account is active; orders and invoices for 6 years; security logs up to 12 months; newsletter until you unsubscribe.

4. Recipients

We never sell your data. Processors: Vercel (hosting), Turso (database, EU), Cloudflare (security), Resend (email, EU), Google Ireland (Analytics, with consent) and our payment provider (we never see your card details). International transfers are covered by the EU-US Data Privacy Framework or standard contractual clauses.

5. Your rights

Access, rectification, erasure, objection, restriction and portability: write to privacidad@novexstate.com or download your data from "My account". You may lodge a complaint with the Spanish Data Protection Agency (aepd.es).