ALPHA INFINITE MARKETING - FZCO
The operator of Novra Code is responsible for the processing described here.
Address: IFZA Business Park, DDP, Unit 51879-001, P.O. Box 342001, Dubai, United Arab Emirates
Privacy contact: info@novracode.com
NOVRA CODE / LEGAL
Privacy Policy
How personal data is handled when you visit Novra Code, purchase our software or use our services.
Website visits and security
Website requests can include your IP address, browser information, requested URL, referral information and request time. These data are used to deliver the website, investigate errors and protect the service. The website is hosted on servers of Hetzner Online GmbH (Germany), which we manage through xCloud, and is delivered through Cloudflare, Inc. (global CDN, United States). Cloudflare also provides security filtering, Cloudflare Turnstile (bot protection on some forms) and Cloudflare Web Analytics (page-view statistics that do not use cookies). We additionally use Independent Analytics, a WordPress plugin that records page views on our own server without setting cookies; it uses a pseudonymous visitor identifier derived from your IP address and browser information, plus approximate location (country). Visits by logged-in administrators are not recorded. Log retention: up to 30 days.
Accounts, orders and customer support
When you register, buy a product or contact us, we process the information you provide, such as your name, email address, billing address, optional company name and tax identification number, order details and support messages. Novra Code sells to business customers only. We use this information to manage your account, fulfil purchases, provide downloads and support, handle refunds and maintain transaction records. The website uses WordPress and FluentCart for account and order management and Fluent Support for support tickets.
Contact, newsletter and email
Contact form: if you use our contact form, we process your name, email address, topic, subject and message, together with technical data such as your IP address, which the form plugin (Fluent Forms) stores with the entry on our server. Your name and email address are also saved as a contact in our CRM (FluentCRM, hosted on our own server) so that we can manage the conversation. Newsletter: if you sign up with the footer form, we store your email address in FluentCRM and send you emails about Novra Code; every email contains an unsubscribe link. Email delivery: order, license and support emails and newsletters are sent through Amazon SES (Amazon Web Services, EU (Frankfurt) region), which processes the recipient address and message content for delivery.
Payments
The checkout displays the payment methods available for your order. Payment-related information may be shared with the selected payment provider to process and verify the transaction. Enabled providers, their privacy notices and processing locations: Stripe (Stripe Payments Europe, Ltd., Ireland / Stripe, Inc., United States; Privacy Policy: https://stripe.com/privacy), PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg / PayPal, Inc., United States; Privacy Policy: https://www.paypal.com/webapps/mpp/ua/privacy-full) and NOWPayments for crypto payments (FD Transfers LLC, Saint Vincent and the Grenadines; Privacy Policy: https://nowpayments.io/doc/fd-privacy-policy.pdf). Transaction references and payment status are recorded with your order. If you pay with crypto, we send NOWPayments the order amount in US dollars, the coin you choose, an internal order reference and the order number, so that it can create the deposit address and the amount to send and tell us when your payment arrives. Your name, email address and billing address are not sent to NOWPayments. Your transfer is made on the public blockchain of the chosen network, where the sending address, the amount and the transaction hash are visible to anyone. With your order we record the NOWPayments payment ID, the deposit address, the amounts requested and received, the transaction hash and the payment status.
Software licenses and updates
Activating a Novra Code plugin (Novra Cache, Novra Object Cache or Novra Tracking) or checking its license sends the license key, website address and activation information to our licensing service. Activation requests also include WordPress and PHP version information. These data support license validation, installation limits and authenticated updates. License and activation data retention: for as long as your customer account remains active to provide continuous lifetime license management and updates, or until you request account deletion. Temporary validation and server request logs are retained for up to 30 days.
Remove Unused CSS processing
When you enable Remove Unused CSS in Novra Cache, the plugin communicates with our processing service using the activated license. The service processes the submitted website URLs and the page content and styles needed to generate optimized CSS. Requests may also generate technical service logs. Processing provider, hosting location, job/cache retention and any further recipients: hosted on dedicated/cloud infrastructure provided by Hetzner Online GmbH (Germany / European Union). Temporary processing jobs and generated CSS data are retained for up to 30 days (or until cache purge requests are received). Technical processing logs are stored for up to 30 days. No data is shared with any further third-party recipients.
Website speed test
If you submit a website address to our speed test, we scan that address with our scan service (speedtest.novracode.com), which retrieves the page, runs our own server checks and obtains Google PageSpeed Insights results for it. We process the submitted address, the scan results and your IP address, which we use to limit the number of requests. The result is published on a report page with its own address that is not indexed by search engines. The form is protected by Cloudflare Turnstile, which receives technical data from your browser to tell humans from bots.
Cookies and affiliate attribution
The site uses cookies and similar storage. Strictly necessary cookies keep you signed in and keep your cart and checkout state (WordPress and FluentCart; for the session or up to 2 days).
Other cookies currently set by this website:
• f_aff: first-party affiliate attribution cookie, set when you arrive through an affiliate link; up to 60 days.
• _ga and _ga_<ID>: Google Analytics 4 (Google); up to 400 days.
• nvtr_*: first-party cookies of our Novra Tracking plugin: a queue token for order events (up to 1 hour), an advertising click identifier if you arrive from an ad click (up to 180 days) and, only if you switch tracking off, an opt-out cookie (1 year).
• YouTube cookies (youtube.com; set by Google): only after you click play on an embedded video. Embeds use youtube-nocookie.com and load only after you click.
Cloudflare Web Analytics and Independent Analytics do not set cookies.
Analytics and advertising measurement. We use Google Analytics 4 (GA4), operated by Google Ireland Limited (Ireland) and Google LLC (United States; Privacy Policy: https://policies.google.com/privacy), to measure how the website is used. GA4 processes page and interaction data and pseudonymous identifiers, and does not log or store IP addresses. For purchases and logged-in customers, order events and, where enabled, a pseudonymous user identifier and hashed contact data are also sent to GA4 from our server. Google's advertising-related measurement endpoints may be contacted as part of GA4 measurement. Analytics event data retention in GA4 is configured for up to 14 months. We also use the measurement pixel for ChatGPT Ads provided by OpenAI (United States; Privacy Policy: https://openai.com/policies/privacy-policy/) to measure the results of our advertising. It receives page views and conversion events, including purchases, and, where enabled, hashed customer contact data for matching. This website does not currently show a cookie banner or ask for consent before these tools load. You can block these tools in your browser or with an extension, install the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout), or ask us to stop processing your data via info@novracode.com. You can manage, block or delete cookies at any time in your browser settings.
Affiliate accounts
If you apply to our affiliate program, we process your application, contact details, referral activity, commission records and payout details to operate the program. The site uses FluentAffiliate. Payout service providers and retention periods: Payouts are processed via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg / PayPal, Inc., United States; Privacy Policy: https://www.paypal.com/privacy) in USD on a monthly basis once the minimum earnings threshold of $50 is reached, subject to a 30-day verification hold. Affiliate account and referral records are retained for the duration of your active affiliate account. Accounting, payout transaction history, and tax-relevant billing records are retained for up to 5 years to satisfy statutory commercial and tax record-keeping requirements.
Purposes and legal grounds
Depending on the processing and the law that applies, we rely on steps necessary to enter into or perform a contract, compliance with legal obligations, consent, or legitimate interests such as securing the service and responding to enquiries. Applicable legal framework and the basis for each processing activity: Our processing activities are governed by the Federal Decree-Law No. 45 of 2021 on Personal Data Protection (UAE PDPL) and, where applicable to visitors and customers located in the European Economic Area (EEA) and the United Kingdom, the General Data Protection Regulation (GDPR / UK GDPR). We process data under the following grounds: (1) Contract Performance (Art. 6(1)(b) GDPR / Art. 4(2) UAE PDPL): processing store orders, generating and authenticating lifetime license keys, providing continuous software updates, administering customer accounts, and managing affiliate commission payouts; (2) Compliance with Legal Obligations (Art. 6(1)(c) GDPR / Art. 4(3) UAE PDPL): retaining accounting, invoicing, and transaction records pursuant to statutory commercial and tax regulations; (3) Legitimate Interests (Art. 6(1)(f) GDPR / Art. 4(7) UAE PDPL): operating web servers, mitigating abuse and DDoS attacks via Cloudflare and Hetzner, processing RUCSS stylesheet optimizations, running the website speed test, answering contact and support requests, measuring website use with Independent Analytics and Cloudflare Web Analytics, and operating first-party affiliate attribution; (4) Consent (Art. 6(1)(a) GDPR / Art. 4(1) UAE PDPL): subscribing you to our newsletter; and (5) Google Analytics 4 and the ChatGPT Ads measurement pixel: we use these tools to understand how our website is used and how our advertising performs, which is our legitimate interest in improving our offer and measuring our marketing (Art. 6(1)(f) GDPR). Where the law that applies to you requires your consent for these tools, please see the notes in the section on cookies.
Recipients and international transfers
Service providers may process data for hosting, delivery, payments, email, support and software processing. Information may also be disclosed where legally required. Provider list and processing countries: Hetzner Online GmbH (Germany / European Union; web hosting and server processing, including RUCSS optimization), xCloud (server management), Cloudflare, Inc. (United States / Global CDN; content delivery, security, Turnstile and Web Analytics), Stripe Payments Europe, Ltd. (Ireland) & Stripe, Inc. (United States; payment processing), PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) & PayPal, Inc. (United States; payment processing and affiliate payouts), NOWPayments (FD Transfers LLC, Saint Vincent and the Grenadines; crypto payment processing), Amazon Web Services (Amazon SES, EU (Frankfurt) region; email delivery), Google Ireland Limited (Ireland) & Google LLC (United States; GA4 analytics, PageSpeed Insights, YouTube embeds) and OpenAI (United States; ChatGPT Ads measurement). Our contact, support, CRM, newsletter and analytics tools (Fluent Forms, Fluent Support, FluentCRM, Independent Analytics) run on our own server. Where international transfer safeguards are required, the applicable mechanism and how to obtain information about it are: Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to Art. 46 GDPR, the EU-U.S. Data Privacy Framework (DPF) where certified, and cross-border adequacy and security safeguards pursuant to Arts. 22–23 of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). NOWPayments is operated from outside the EU and the UK (Saint Vincent and the Grenadines), a country without an EU or UK adequacy decision. If you choose to pay with crypto and none of the safeguards above applies, your payment data is transferred to NOWPayments because this is necessary to process the payment method you selected (Art. 49(1)(b) GDPR). You can avoid this transfer by paying with Stripe or PayPal. You may request further information or copies of relevant safeguards by contacting info@novracode.com.
Retention and security
Data is retained for the purposes described above and applicable recordkeeping obligations, then deleted or anonymized as appropriate. Account, order/tax record, support, backup and affiliate retention periods: customer accounts and lifetime license records are retained for as long as your account remains active or until you request account deletion; order, payment, and tax/invoicing records are retained for 5 years to comply with statutory commercial and tax record-keeping regulations; customer support communications are retained for up to 24 months following issue resolution; newsletter subscriptions are kept until you unsubscribe or ask us to delete them; system and database backup snapshots are maintained on a rolling retention cycle for up to 30 days; and affiliate account and payout history are retained for the duration of the active partnership plus 5 years for statutory accounting records. We use access controls and technical safeguards appropriate to the processing; no online service can guarantee absolute security.
Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and may object to certain processing. Where we rely on consent, you may withdraw it for future processing. Some records may need to be retained to meet legal obligations. Contact info@novracode.com to make a request. You may also complain to a competent data protection authority: in the United Arab Emirates, the UAE Data Office; or if you are located in the European Economic Area (EEA) / United Kingdom, your local data protection supervisory authority in your country of habitual residence or place of work (a comprehensive directory of EU authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en). Read more about rights under the GDPR where it applies.
Changes to this policy
This page will be updated when our processing practices change. Last updated: October 10, 2026.
QUESTIONS ABOUT YOUR DATA?
Reach us through our contact page — we will get back to you as soon as we can.