Privacy policy clauses for Novu
Novu is an open-source notification infrastructure platform that enables websites to send multi-channel notifications (email, SMS, push, in-app) to users. We use Novu to manage subscriber preferences and deliver targeted notifications while tracking delivery status.
Free scan · No signup · Results in 60 seconds
What data Novu collects
Your privacy policy must disclose each of the following data types when you use Novu.
When does Novu trigger privacy obligations?
Installation and First Data Flow
Adding Novu to your application triggers immediate privacy obligations the moment you begin collecting subscriber identity data and notification preferences. Novu's core function—storing subscriber profiles, channel preferences (email, SMS, push, in-app), and notification content—means you are processing personal data as defined under GDPR Article 4(1) and CCPA Section 1798.100.
Applicable Regulations by Deployment
GDPR (EU/EEA users). If your app reaches EU residents, GDPR applies regardless of where Novu is hosted. You must establish a lawful basis (GDPR Article 6) for collecting subscriber identity and preferences—typically consent under Article 7 or legitimate interest under Article 6(1)(f). If you self-host Novu, you remain the controller; if you use Novu's cloud offering, you and Novu are joint controllers under Article 26, requiring a Data Processing Agreement (DPA).
CCPA (California users).
