Introduction
This Privacy Policy ("Policy") describes how Novastorms.ai ("Novastorms", "Company", "we", "our", or "us") handles information in connection with the In-House Insights desktop application and all related services (collectively, the "Software"). In-House Insights is built on a local-first architecture: your data is processed entirely on your own device and is never uploaded to our servers. We are committed to transparency about the limited information we do handle.
By installing or using the Software, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please do not install or use the Software.
1. Our Core Privacy Commitment
In-House Insights is designed so that all data analysis happens locally on your device. We do not operate cloud servers that receive, store, or process your data. The files you analyze — whether CSV, JSON, PDF, or database queries — never leave your machine through our Software.
We collect no personal information as a condition of using In-House Insights, with the narrow exceptions described below relating to license verification and optional third-party AI integrations that you control.
2.1 Information We Do NOT Collect
To be clear, we do not collect any of the following:
- Your name, email address, or contact details (unless you contact us directly)
- The content of any files you analyze (CSV, JSON, PDF, database records, or any other data)
- Your queries, prompts, or analysis results
- Usage analytics, telemetry, or behavioral data
- Browsing history, cookies, or tracking pixels
- Location data or IP addresses for tracking purposes
2.2 License Verification Data
If you activate a licensed (paid) version of In-House Insights, the Software communicates with our license server to verify your license. During this process, the following technical information is transmitted:
- License key you entered during activation
- Device identifier: a locally generated fingerprint based on your device's hostname, operating system type, system architecture, and local username
- MAC addresses of your network interfaces (used solely for device binding to prevent unauthorized license sharing)
- Application version (used to check for available updates)
Retention: License verification data is retained for the duration of your active license and for up to 12 months after expiration for dispute resolution purposes, after which it is deleted. This information is sent to our license verification endpoint at inhouse.novastorms.com and is used exclusively for the purposes of license activation, verification, and update checks. We do not use this data for profiling, marketing, or any purpose unrelated to license management.
2.3 Information Stored Locally on Your Device
The Software stores the following data locally on your device. This data is never transmitted to Novastorms:
- Uploaded files and datasets
- Generated analysis code (Python/R)
- Query history and saved analyses
- Document libraries and vector embeddings (for PDF analysis)
- User interface preferences
- Live Monitor session configurations and results
- Database connection credentials (encrypted, stored locally)
You retain full control over this locally stored data and may delete it at any time by removing the application's data directory or uninstalling the Software.
2.4 Software Updates
The Software periodically checks for available updates by contacting inhouse.novastorms.com. During this check, your current application version and operating system type are transmitted. No personal information is included in update requests.
3. Optional Third-Party AI Services
In-House Insights supports optional integration with third-party large language model (LLM) providers to assist with code generation, natural language explanations, and query enhancement. These integrations are entirely optional and user-controlled.
If you choose to enable an AI integration, you must provide your own API key for the selected provider. When you submit a query that uses an AI provider, the text of your query (and relevant context needed to generate a response) is sent directly from your device to that provider's API. This data does not pass through Novastorms servers.
We strongly recommend reviewing the privacy policy of any third-party AI provider before enabling integration. Novastorms is not responsible for how these third parties handle data sent to their APIs.
- Anthropic (Claude) — https://www.anthropic.com/privacy
- OpenAI (GPT models) — https://openai.com/privacy
- Google (Gemini) — https://policies.google.com/privacy
- xAI (Grok) — https://x.ai/legal/privacy-policy
- Local LLM via Ollama — Fully local, no external data transmission
Important: You can use In-House Insights without any AI integration. The Software also supports fully local LLM processing via Ollama, which involves no external data transmission whatsoever.
4. How We Use Information
We use the limited information described in Section 2.2 solely for the following purposes. We do not use your information for advertising, profiling, marketing, or to train artificial intelligence models.
- License management: Verifying that your license is valid and that it is being used within the permitted number of devices
- Software updates: Notifying you of available updates to the Software
- Customer support: If you contact us directly, we use the information you provide to respond to your inquiry
- Legal compliance: To comply with applicable laws, regulations, or legal processes
5. How We Share Information
We do not sell, rent, or trade your personal information to third parties. We may disclose the limited information described in Section 2.2 only in the following circumstances:
- Service providers: We use hosting infrastructure to operate our license verification server. These providers process data on our behalf under contractual obligations to protect your information.
- Legal requirements: We may disclose information if required to do so by law, regulation, court order, or governmental request.
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of the transaction. We will notify you of any such change by updating this Policy.
6.1 Local Security
License data stored on your device is encrypted using AES-256-GCM encryption. Database connection credentials that you configure within the Software are also stored locally in encrypted form.
6.2 Transmission Security
All communications between the Software and our license server use HTTPS/TLS encryption in transit.
6.3 Your Responsibility
Because your data remains on your device, you are responsible for maintaining the security of your local environment, including keeping your operating system and the Software up to date, using appropriate access controls, and maintaining backups of your data.
7. Data Retention
We retain data according to the following schedule:
- License data: Retained for the duration of your active license plus up to 12 months for dispute resolution.
- Local data: Stored on your device until you choose to delete it. Uninstalling the Software removes application files; you may additionally clear the application data directory to remove all locally stored data.
- Support correspondence: If you contact us, we retain correspondence for up to 24 months to maintain service quality and resolve any ongoing issues.
8.1 All Users
Regardless of your location, you may exercise the following privacy rights:
- Access information about what limited data we hold in connection with your license
- Request deletion of your license verification data by contacting us at info@novastorms.ai
- Delete local data at any time by clearing the Software's data directory on your device
- Disable AI integrations at any time by removing your API key from the Software settings
8.2 Canadian Residents (PIPEDA)
Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to access the personal information we hold about you, challenge its accuracy and completeness and have it amended as appropriate, and withdraw consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions.
- Access the personal information we hold about you
- Challenge the accuracy and completeness of your personal information and have it amended as appropriate
- Withdraw consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions
To exercise these rights, contact our Privacy Officer at info@novastorms.ai. We will respond to your request within 30 days.
8.3 United States Residents
If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another state with applicable privacy legislation, you may have additional rights, including:
- The right to know what personal information we collect and how it is used
- The right to request deletion of your personal information
- The right to opt out of the sale of personal information — we do not sell personal information
- The right to non-discrimination for exercising your privacy rights
To exercise these rights, contact us at info@novastorms.ai. We will verify your identity before processing your request and respond within the timeframes required by applicable law.
8.4 EEA, UK, and Switzerland Residents (GDPR / UK GDPR)
If you are located in the EEA, UK, or Switzerland, we process the limited personal data described in this Policy on the following legal bases: legitimate interests (Article 6(1)(f) GDPR) for license verification and fraud prevention; contract performance (Article 6(1)(b) GDPR) for fulfilling our obligations under your license agreement; and legal obligation (Article 6(1)(c) GDPR) for compliance with applicable laws.
Under the GDPR / UK GDPR, you have the following rights:
- Access your personal data
- Rectification of inaccurate personal data
- Erasure ("right to be forgotten") of your personal data
- Restrict processing of your personal data
- Data portability — receive your data in a structured, machine-readable format
- Object to processing based on legitimate interests
- Lodge a complaint with your local supervisory authority
International Transfers: License verification data may be processed in Canada and/or the United States. Where personal data is transferred outside the EEA/UK, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission. To exercise any of these rights, contact us at info@novastorms.ai. We will respond within 30 days (extendable by an additional 60 days for complex requests, with prior notice).
9. Children's Privacy
In-House Insights is not directed to individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at info@novastorms.ai, and we will take steps to delete such information.
10. Cookies and Tracking Technologies
The In-House Insights desktop application does not use cookies, tracking pixels, web beacons, or any similar tracking technologies. We do not engage in behavioral advertising or cross-device tracking.
The Software uses browser-standard localStorage solely to store your user interface preferences (such as theme and layout settings) on your local device. This data is never transmitted externally.
11. Do Not Track Signals
Because In-House Insights does not track users or collect browsing data, Do Not Track signals are not applicable to our Software.
12. Third-Party Links
The Software or associated documentation may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before interacting with them.
13. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will notify you through the Software or by other reasonable means. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Software after any changes constitutes your acceptance of the updated Policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at sales@novastorms.ai.
