PRIVACY POLICY

1. Introduction

NovaKons AI Private Limited ("NovaKons," "Company," "we," "our," or "us") respects the privacy of individuals and organisations that interact with our website, products, and services.

This Privacy Policy explains how we collect, use, process, store, share, and protect personal information when individuals access the NovaKons commercial website, communicate with us, register for an account, or use Titan, our AI-powered construction intelligence platform.

NovaKons is incorporated in India and makes its services available to users internationally.

By using our services, you acknowledge the data-processing practices described in this Privacy Policy. Where applicable law requires consent or another specific legal basis, we will rely on that basis rather than treating use of the services alone as consent.

This Privacy Policy should be read together with our applicable Terms & Conditions.

2. Scope

This Privacy Policy applies to:

• –Visitors to the NovaKons website.
• –Individuals and organisations making business enquiries.
• –Users registering for or accessing Titan.
• –Customers submitting documents, questions, or project information for AI-assisted analysis.
• –Individuals communicating with NovaKons through email, forms, or digital interfaces.
• –Job applicants and individuals submitting recruitment information.
• –Other individuals whose personal information is processed in connection with these activities.

This policy covers the NovaKons commercial website and Titan.

Enterprise-specific deployments, including MIRAGE Shadow OS, may be governed by separate agreements, privacy provisions, data-processing terms, and customer-specific arrangements.

3. Information We Collect

Depending on how you interact with NovaKons, we may collect the following categories of information.

3.1 Account and Identity Information

When you register for Titan or access our services, we may collect:

• –Full name.
• –Email address.
• –Company or organisation name.
• –Professional designation.
• –Country or business location.
• –Account credentials and authentication identifiers.
• –Account preferences and related profile information.

Users may be able to register or authenticate using an email address, Google, Microsoft, Apple, or an organisation-managed identity.

Where third-party authentication is used, we may receive information permitted by the relevant authentication provider and the permissions associated with the sign-in process.

3.2 Customer Content and Project Information

Titan enables users to submit construction-related information for analysis and review.

Depending on the services used, this information may include:

• –Construction contracts and agreements.
• –Drawings, specifications, and technical records.
• –Bills, payment applications, and certificates.
• –Project schedules and progress records.
• –Correspondence and meeting records.
• –Claims, variations, and commercial documentation.
• –Quality, inspection, procurement, and site records.
• –Questions, instructions, prompts, and supporting materials.
• –AI-generated analyses, findings, summaries, and other outputs.

These materials may contain personal information relating to employees, consultants, contractors, clients, or other individuals.

We process such information in connection with the services requested by users and for the other purposes described in this policy.

3.3 Website and Technical Information

When you visit our website or use Titan, certain technical information may be collected automatically, including:

• –IP address.
• –Browser type and version.
• –Device and operating system information.
• –Access times and session information.
• –Pages visited and interactions with our services.
• –Error reports and diagnostic information.
• –Security and authentication logs.
• –Cookies and similar technical identifiers.

3.4 Communications and Enquiries

When you contact NovaKons, we may collect your name, contact details, organisation, enquiry details, correspondence, and any information you voluntarily provide.

This includes communications through website forms, email, and available digital assistants.

3.5 Payment and Transaction Information

When you purchase Titan services, we may collect or receive information relating to:

• –Customer and billing identity.
• –Transaction reference numbers.
• –Payment status.
• –Amount and currency.
• –Applicable taxes.
• –Invoices and payment confirmations.
• –Refund or dispute-related records, where applicable.

Payment transactions may be processed through Razorpay or other payment service providers engaged by NovaKons.

Payment providers may independently collect and process information necessary to complete transactions, including payment instrument details, in accordance with their applicable terms and privacy practices.

3.6 Recruitment Information

When you apply for employment or other opportunities with NovaKons, we may collect:

• –Name and contact information.
• –Curriculum vitae or résumé.
• –Educational qualifications.
• –Employment history.
• –Professional skills and experience.
• –Portfolio or professional profile information.
• –Other information submitted during recruitment.

4. How We Use Information

NovaKons may use personal information and customer-submitted content for the following purposes:

Service delivery: To provide access to Titan, process user requests, analyse submitted materials, generate outputs, and deliver construction intelligence services.

Account management: To register users, authenticate access, maintain accounts, and administer service-related settings.

Product improvement: To evaluate service performance, improve functionality, develop new features, and enhance the quality and reliability of our products.

Artificial intelligence development: To evaluate, test, refine, and develop AI capabilities, including models, analytical methods, workflows, and supporting systems, as described in Section 5.

Customer support: To respond to enquiries, investigate issues, provide assistance, and review service-related concerns.

Business operations: To manage transactions, maintain records, administer commercial relationships, and operate our business.

Communications: To provide service notifications, respond to requests, and communicate relevant product or company information.

Recruitment: To evaluate applications, communicate with candidates, and consider individuals for current or future opportunities.

Security and compliance: To identify misuse, prevent fraud, protect systems, investigate incidents, enforce applicable terms, and comply with legal obligations.

Analytics: To understand how our website and services are used and improve their performance and usability.

Where required by applicable law, we will obtain consent or establish another appropriate legal basis before processing personal information for a particular purpose.

5. Artificial Intelligence Processing and Model Improvement

5.1 AI-Assisted Services

Titan uses automated processing, including artificial intelligence services, to read construction information, organise submitted materials, identify relevant issues, and support the generation of structured outputs. Outputs pass automated quality and source checks before release. NovaKons reviews any output those checks flag, and you can ask for a NovaKons review of any output. NovaKons is AI and can make mistakes: please check important points against your own records and, where needed, with your qualified advisers.

We use Anthropic's Claude AI models for the following:

• –Reading scanned documents and photos. When you upload a scanned PDF page or a photograph to Titan, the image of that page is sent to Anthropic so that its text can be read (transcribed). Documents that already contain readable text are read on our own servers.
• –Ask Nova on our website. The messages you type to Ask Nova are sent to Anthropic to prepare a reply.
• –The scope scan. The description of your matter that you give Nova when you sign in is sent to Anthropic to understand what you need.

The information shared with Anthropic is limited to what is needed for that task. Anthropic processes it outside India, on infrastructure it operates or uses.

5.2 Review and Quality Improvement

NovaKons personnel or authorised service providers may access and review relevant customer interactions, documents, inputs, and outputs where reasonably necessary for:

• –Delivering the requested service.
• –Supporting human review of outputs.
• –Troubleshooting technical or analytical issues.
• –Assessing output quality and accuracy.
• –Investigating misuse or security concerns.
• –Improving product performance and reliability.

5.3 AI Research, Development, and Training

NovaKons develops and improves artificial intelligence systems and construction intelligence capabilities.

Subject to applicable law, contractual restrictions, and any permissions required for the relevant information, NovaKons may use eligible service interactions, prompts, feedback, documents, extracted information, and generated outputs to:

• –Evaluate and improve existing AI-assisted services.
• –Develop and test analytical methods.
• –Create evaluation and quality-assurance datasets.
• –Improve document understanding and information extraction.
• –Develop, fine-tune, or train proprietary AI models.
• –Research and develop future construction intelligence capabilities.

Where appropriate, NovaKons may use aggregated, anonymised, or de-identified information for these purposes.

The use of personal information or confidential customer content for model training remains subject to applicable privacy laws, customer agreements, and any required consent or other lawful authorisation.

Customers may contact NovaKons at hello@novakons.com regarding the use of their personal information for model improvement or training, including to exercise any applicable objection, withdrawal, or other privacy right.

5.4 Third-Party AI Providers

Third-party AI providers may process information in accordance with their contractual arrangements with NovaKons and their applicable service terms.

NovaKons' own use of information for product improvement or model development is separate from any use that a third-party AI provider may be permitted to make of information.

We do not represent that all information submitted to Titan is processed exclusively by NovaKons-owned models or infrastructure.

5.5 AI Output Limitations

AI-generated outputs may contain errors, omissions, or inaccuracies.

Titan is designed to support professional analysis and decision-making. Users remain responsible for reviewing outputs and determining whether they are appropriate for their intended purposes.

6. Customer Responsibilities

Users are responsible for determining what information they submit to Titan.

Before uploading documents or entering information, users should ensure that they possess the necessary rights, permissions, and authority to submit and process that information.

Users should avoid submitting personal, sensitive, restricted, or confidential information unless its submission is appropriate for the intended service and permitted under applicable laws and contractual obligations.

Where customer materials contain information about third parties, customers are responsible for fulfilling their applicable obligations in relation to collecting, disclosing, and submitting that information.

These responsibilities do not exclude any obligations that applicable law independently places on NovaKons.

7. Legal Bases for Processing

Where applicable data protection law requires an identified legal basis, NovaKons processes personal information on one or more of the following grounds, as relevant:

• –Performance of a contract: Where processing is necessary to provide requested services or administer a customer relationship.
• –Legitimate interests: Where permitted, for activities such as service improvement, security, fraud prevention, and ordinary business administration, subject to applicable safeguards.
• –Consent: Where consent is required, including for particular marketing, tracking, or other processing activities.
• –Legal obligations: Where processing is necessary to comply with applicable laws, regulations, or lawful requests.
• –Other grounds permitted by law: Where a relevant privacy framework authorises processing on another basis.

The applicable legal basis depends on the nature of the information, the purpose of processing, and the jurisdiction concerned.

8. Sharing and Disclosure of Information

NovaKons may share relevant information with third parties where necessary for the purposes described in this policy.

Such recipients may include:

8.1 Hosting and Infrastructure Providers

Our public website (novakons.com) is hosted by Hostinger.

Titan (novakons.io), including the documents you upload and the records prepared from them, runs on NovaKons servers in Google Cloud's Delhi region (India). Traffic to Titan passes through Cloudflare, which protects it against attacks.

The service providers that receive personal information to operate NovaKons are:

• –Google Cloud: Runs Titan's servers and stores uploaded documents (Delhi region, India). Receives: your Titan account details, uploaded documents and the records prepared from them.
• –Cloudflare: Protects and delivers Titan's traffic. Receives: technical information such as IP address and the requests your browser makes.
• –Hostinger: Hosts the public website and passes on messages sent through its Connect forms. Receives: technical information about website visits and the content of those messages.
• –Supabase: Manages website accounts and sign-in. Receives: name, email, sign-in records and billing details you enter.
• –Resend: Sends account and service emails, and delivers messages sent through the website's Connect forms to NovaKons. Receives: your email address and the content of those emails and messages.
• –Razorpay: Processes payments. Receives: billing identity, amount, and the payment details you enter with Razorpay.
• –Anthropic: Provides the AI models described in Section 5.1. Receives: page images of scanned documents and photos, and the text of your messages to Nova.
• –Google Workspace: Business email. Receives: emails you send to NovaKons.
• –Google Analytics (through Google Tag Manager): Measures how the public website is used, only if you select Accept on the website's cookie banner. Receives: pages visited, buttons selected, device and browser details, approximate location derived from your IP address, and a random visitor identifier. It is not used on sign-up, sign-in or account pages, or in Titan.

Other than where this policy states otherwise, these providers may process the information they receive outside India.

8.2 AI Technology Providers

We may share relevant information with AI technology providers, including Anthropic, to process user requests and support Titan's functionality.

8.3 Authentication Providers

Where users choose third-party or organisation-managed sign-in, relevant information may be exchanged with the selected identity provider to authenticate the user and administer access.

8.4 Payment Service Providers

We may share transaction-related information with Razorpay and other authorised payment partners to facilitate payments, confirmations, refunds where applicable, and related financial administration.

8.5 Business and Technology Service Providers

We may use service providers for corporate communications, email, analytics, technical support, database operations, security, and other business functions.

These may include services provided through Google's business technology ecosystem.

8.6 Professional Advisers and Authorities

We may disclose information to legal advisers, auditors, regulators, law-enforcement authorities, courts, or other parties where reasonably necessary and permitted or required by law.

8.7 Corporate Transactions

Information may be disclosed as reasonably necessary in connection with a proposed or completed merger, acquisition, restructuring, financing, or transfer of business assets, subject to applicable legal requirements.

NovaKons does not treat the submission of customer documents as permission to disclose them publicly.

9. International Data Processing and Transfers

NovaKons is based in India and serves an international customer base.

Titan's servers and the documents you upload are located in India (Google Cloud, Delhi region). Some providers listed in Section 8.1 process the information they receive in other countries. In particular, scanned pages, photos and messages to Nova are processed by Anthropic outside India.

Where applicable law imposes requirements on international transfers of personal information, NovaKons will use an appropriate lawful transfer mechanism or other required safeguards.

Data protection laws and practices may differ between jurisdictions.

10. Data Security

NovaKons recognises the importance of protecting customer and personal information.

We seek to apply appropriate technical, administrative, and organisational safeguards, taking account of the nature of the information, the services provided, and relevant risks.

These safeguards include access controls that limit each case to its owner and authorised NovaKons staff, authentication for every account, limits on repeated sign-in attempts, encrypted connections (HTTPS), activity logging, and restrictions on staff access to information.

However, no internet-based service, electronic transmission, or information system can be guaranteed to be completely secure.

Users should protect their account credentials, use appropriate access controls, and exercise care when submitting information through online services.

10.1 Security Incidents

If we become aware of a security incident that affects your personal information or your documents, we will inform affected customers without undue delay, explain what happened and what we are doing about it, and notify the relevant authorities where the law requires us to.

To report a security concern, contact hello@novakons.com with the subject "Security".

11. Data Retention

NovaKons retains personal information and customer-related records for as long as reasonably necessary for the purposes for which they are processed, including:

• –Providing and maintaining services.
• –Supporting customer accounts and requested work.
• –Maintaining relevant transaction and accounting records.
• –Resolving enquiries, complaints, and disputes.
• –Supporting product development where permitted.
• –Protecting platform security.
• –Meeting legal and regulatory obligations.

Retention periods may vary depending on the type of information, the service involved, applicable agreements, operational requirements, and legal obligations. In particular:

• –Your documents and case records are kept while your matter is active and for as long as you need access to the results, unless you ask us to delete them sooner (see Section 12).
• –Payment and invoice records are kept for the period required by Indian tax and accounting law, even after a case is deleted.
• –Website enquiries are kept for as long as needed to respond and follow up.

Information may be deleted, anonymised, or retained in a restricted form when it is no longer required for its original purpose, as appropriate.

Backup copies and information required for legitimate legal, security, or compliance purposes may remain for an additional period.

Where information has been lawfully incorporated into an anonymised or de-identified dataset, it may no longer be associated with an identifiable individual.

12. Data Access, Correction, and Deletion

Depending on applicable law, individuals may have rights to:

• –Request access to personal information held about them.
• –Request correction of inaccurate or incomplete information.
• –Request deletion of eligible personal information.
• –Withdraw consent where processing relies on consent.
• –Object to or restrict certain processing activities.
• –Request portability of information where applicable.
• –Obtain information about relevant processing activities.
• –Submit complaints to an appropriate data protection authority.

To exercise an applicable privacy right, contact:

hello@novakons.com

We may request information reasonably necessary to verify identity or authority before processing a request.

Deleting a case. You can ask us to delete a Titan case by writing to hello@novakons.com from the email address on your account. Once we have confirmed the request, we delete the documents you uploaded, the text read from them, and the records, findings and memo prepared for that case, and we confirm to you when this is done. We keep only the payment and invoice records that the law requires. Copies may remain in our system backups until those backups are replaced in the normal cycle; they are not used for any other purpose.

Requests will be considered and handled in accordance with applicable law, relevant contractual obligations, and legitimate retention requirements.

Certain information may need to be retained where required or permitted by law.

13. Cookies and Similar Technologies

Our website and services may use cookies, session identifiers, and similar technologies for purposes such as:

• –Enabling essential website functionality.
• –Supporting login and authentication.
• –Maintaining user sessions.
• –Improving security.
• –Remembering relevant preferences.
• –Understanding website and service performance.

Additional analytics or third-party technologies may be introduced as our services develop.

Where required by applicable law, non-essential cookies or similar technologies will be subject to appropriate consent or other applicable requirements.

Further information may be provided in a separate NovaKons Cookie Policy.

14. Marketing and Business Communications

NovaKons may communicate with individuals and organisations regarding enquiries, requested services, company developments, product updates, and relevant business opportunities.

Marketing communications involving personal information will be conducted in accordance with applicable legal requirements.

Recipients may request that NovaKons stop sending non-essential marketing communications by contacting hello@novakons.com or using an available unsubscribe mechanism.

Operational communications necessary for account administration, service delivery, security, or transactions may continue where appropriate.

15. Recruitment and Careers

Information submitted through NovaKons recruitment channels may be used to assess qualifications, evaluate applications, communicate with candidates, conduct recruitment activities, and consider applicants for suitable opportunities.

Recruitment information may be retained for a reasonable period where necessary for recruitment administration, future opportunities, record-keeping, or legal compliance.

Applicants may contact hello@novakons.com regarding their personal information and applicable privacy rights.

16. Children's Privacy

NovaKons' website and Titan are intended primarily for professional, commercial, and business use.

Our services are not designed for use by children.

We do not knowingly seek to collect personal information directly from children through Titan accounts.

If we become aware that personal information has been collected from a child in circumstances that require additional consent or other protective measures, we will take appropriate steps in accordance with applicable law.

17. Third-Party Websites and Services

The NovaKons website or Titan may contain links to third-party websites, platforms, or services.

Third-party services may operate under their own privacy policies and terms.

NovaKons is not responsible for the independent privacy practices of third-party websites or services that it does not control.

Users should review the relevant third-party policies where appropriate.

18. Changes to This Privacy Policy

NovaKons may update this Privacy Policy to reflect changes in its services, technology, business operations, legal requirements, or data-processing practices.

The updated policy will be published through the relevant NovaKons website or service, together with its effective or last-updated date.

Where applicable law requires additional notice or consent for material changes, NovaKons will take the necessary steps.

19. Contact Information

For questions, requests, or concerns relating to this Privacy Policy or the processing of personal information, contact:

NovaKons AI Private LimitedNoida, Uttar Pradesh, India

Email: hello@novakons.com

Privacy-related requests should include sufficient information to help us identify the relevant account, interaction, or concern.

NovaKons will review and respond to requests in accordance with applicable legal requirements.

© 2026 NovaKons AI Private Limited. All rights reserved.