NouveauAI

Privacy Policy

Nouveau Systems, LLC · Last updated 12 September 2026

Nouveau Systems, LLC (“Nouveau”, “we”) builds and operates automated WhatsApp assistants on behalf of business clients. This policy explains what happens to personal data that passes through those assistants, and how to have it deleted.

1. Who is responsible for your data

When you message a business on WhatsApp and an assistant we built replies, there are two parties:

The business you contacted — for example a clinic or a service company — decides why your data is collected and what it is used for. In data-protection terms they are the controller.
Nouveau operates the software that handles the conversation, on that business’s written instructions. We are the processor. We do not decide what your data is used for and we have no independent commercial use for it.

If you want to know why a particular business is messaging you, ask that business. If you want your data deleted, you can go to either of us — see section 7.

2. What we handle

Data	Where it comes from	Why
Your WhatsApp phone number	Meta, when you message the business	To route the conversation back to you and to recognise you on a return visit
Your WhatsApp profile name	Meta	To address you by name
The content of your messages, and our replies	You	To answer you, and to keep enough conversation context that you do not have to repeat yourself
Message timestamps and WhatsApp message IDs	Meta	To ignore duplicate deliveries and to avoid replying to stale messages
Appointment details you give the business	You, or the business’s booking system	To send appointment reminders, where the business has enabled them

We do not ask for and do not want medical information. Our assistants are front-desk tools. They share opening hours, locations, service menus and booking links. They do not give medical advice and never interpret test or lab results. If you send clinical details anyway, they are treated as ordinary message content under this policy and are visible to the business you contacted, exactly as they would be if a receptionist had read them.

3. What we never do

We do not sell personal data, and we never have.
We do not use your data for advertising, ad targeting or audience building.
We do not use your messages to train artificial-intelligence models, and our AI provider does not train on them either under the commercial terms we use.
We do not message you first unless the business you contacted has a lawful basis to do so — for example an appointment reminder for a booking you made.
We do not share your data with other clients of ours. Every client’s assistant runs against its own separate store.

4. Who else processes it

Running a WhatsApp assistant necessarily involves a few other companies. These are all of them:

Provider	Role	What it sees
Meta Platforms	WhatsApp Business Platform — delivers the messages	Messages, as it does for all WhatsApp traffic, under Meta’s own terms
Anthropic	The AI model that drafts replies	Recent message content, in order to generate a reply. Not retained for training under Anthropic’s commercial terms
DigitalOcean	Hosting	Stores the encrypted server and its database. Servers used for this service are located in Frankfurt, Germany
Cloudflare	Network and transport security	Traffic in transit
Acuity Scheduling (Squarespace)	Appointment reminders, where a business has enabled them	Appointment name, phone number and time

We add no others without updating this page.

5. Where your data lives

Conversation data is stored on a private server in Frankfurt, Germany. Because the businesses we serve and their customers are often in the United Arab Emirates and the wider Gulf, and Nouveau Systems, LLC is incorporated in Wyoming, United States, your data may be accessed from those countries in the course of operating and supporting the service.

6. How long we keep it

Conversation history: 24 months from the date of the message, then automatically deleted. This is enforced by a scheduled job, not by hand.
Duplicate-delivery records (a message ID and a timestamp, no content): 30 days.
Appointment records: kept by the business you contacted for as long as that business needs them. Ask them.

Deleting it sooner, on request, is always available — see below.

7. Your rights, and how to use them

You can ask us to show you what we hold about you, correct it, or erase it. Depending on where you live you may also have the right to object to processing or to complain to a regulator.

The fastest route is the deletion page: nouveauai.org/data-deletion. Or email ishaan@nouveausystems.org from any address, telling us the WhatsApp number involved.

We answer within 30 days, and usually within a few working days. Because we act on a business’s behalf, an erasure request that would delete that business’s own records — an appointment you actually booked, say — is passed to them to action, and we will tell you when we do that.

8. Children

These assistants are built for adult customers of the businesses that deploy them. We do not knowingly collect data from anyone under 16. If you believe a child has messaged one of our assistants, contact us and we will delete the conversation.

9. Security

Traffic is encrypted in transit. Access to the servers is restricted to named administrators using key-based authentication. Each client’s data is held separately. API credentials are held in server-side configuration and are never exposed to message senders.

10. Changes

If this policy changes materially we update the date at the top of this page. Continued use of a WhatsApp assistant after that date is subject to the updated policy.

11. Contact

Nouveau Systems, LLC
A Wyoming limited liability company
Email: ishaan@nouveausystems.org
Web: nouveauai.org