Cookie Policy

Effective date: August 4, 2026 Last updated: August 4, 2026 This Cookie Policy explains how Novapro Lab LLC ("Novapro Lab," "we," "us," or "our") uses cookies, local storage, session storage, and similar technologies on the websites and applications for GreatSales AI™ (the "Services"). This Cookie Policy should be read together with our Privacy Policy.

1. What are cookies and similar technologies?

Cookies are small text files that a website stores on your device through your browser. Local storage and session storage are browser mechanisms that store data locally on your device instead of, or in addition to, cookies. Session storage is typically cleared when you close the browser tab; local storage persists until it is cleared by you or by the website that set it. Pixels, tags, and scripts are small pieces of code that a website or a service provider can use to collect information about how a page or message was viewed or interacted with. We refer to cookies, local storage, session storage, pixels, tags, and similar mechanisms collectively as "Technologies" in this Policy.

2. How we use Technologies

We currently use Technologies to:

• Enable authentication, keep you signed in, and protect your account and our systems from unauthorized access
• Remember your language and other display preferences
• Store your consent choice under this Policy, so we do not ask again unnecessarily
• Temporarily store draft information you enter during account registration, onboarding, and workspace configuration, so you do not lose your progress
• Operate, secure, and maintain the Services

We do not currently use Technologies for analytics or for advertising, marketing, remarketing, or campaign measurement. Section 4 lists every Technology we have verified in the Services, and Section 4.1 lists categories of Technology we do not use.

3. Consent and cookie management

3.1 Our consent approach

GreatSales AI™ is accessed by visitors in multiple countries. We apply a privacy-protective approach to Technologies:

• Essential Technologies may operate without asking for your optional consent, where permitted by applicable law, because they are strictly necessary for core site operation, security, authentication, storing your language and preferences, and remembering your consent choice.
• Analytics and Marketing Technologies would only load after you affirmatively opt in through the consent banner or Privacy Preferences described in Section 3.2, if and when we introduce a Technology in either category. As described in Section 4, we do not currently use any Technology in either category.
• We do not load an optional Technology first and ask for consent afterward, and we do not rely on your location alone to lower this standard.

The first time you visit and no valid consent choice is stored for the current notice version, we display a consent banner that lets you Accept all, Reject non-essential, or Manage preferences, each presented with equal visual prominence. No box for an optional category is pre-selected. Closing the banner without making an explicit choice does not enable an optional Technology; it is treated the same as rejecting non-essential Technologies, and essential Technologies continue to operate either way.

3.2 Manage your preferences

You can view, change, or withdraw your optional consent choice at any time by selecting Privacy Preferences in the site footer, or Manage privacy preferences on this Cookie Policy or on our Privacy Policy. This opens the same Privacy Preferences control used by the initial consent banner, where you can:

• Turn the Analytics or Marketing category on or off, for any Technology we add to those categories in the future
• Select Accept all or Reject non-essential at any time, with the same prominence as when you first chose
• Select Withdraw optional consent to immediately return to the default, privacy-protective state described in Section 3.1

Withdrawing or changing your optional consent:

• Takes effect immediately for future loading of the corresponding optional Technology
• Removes or expires the corresponding optional first-party storage where technically possible
• Does not automatically erase personal information that was already lawfully processed before you withdrew consent; see the Privacy Policy for how to request deletion of that information
• Does not require you to cancel your account or block your access to the Services

We store your choice, the date it was made, the method used to make it (for example, "Accept all," "Reject non-essential," a saved custom selection, or an automatic Global Privacy Control opt-out), and the notice version it responded to, so that we can honor it and demonstrate compliance. See Section 6.

3.3 Technology categories

We do not display a category in the Privacy Preferences control for a type of Technology we do not use, other than Analytics and Marketing, which remain visible so you can see, and control in advance, our current and any future use of those categories.

3.4 Browser settings and signals

You can also control cookies through your browser's own settings, including by deleting existing cookies or blocking new ones. Blocking strictly necessary cookies may prevent you from signing in or using core features of the Services. Clearing your browser's local storage may reset your saved language preference and any in-progress registration, onboarding, or workspace drafts described in Section 4. You can review or change your browser's cookie settings using the official instructions published by Google Chrome, Microsoft Edge, Mozilla Firefox, or Apple Safari. Global Privacy Control (GPC): GPC is a browser or browser-extension signal recognized under certain U.S. state privacy laws as a request to opt out of the sale or sharing of personal information, or of targeted advertising. Our website is configured to detect a GPC signal, and if you visit with GPC enabled and have not already made an explicit cookie choice for the current notice version, we automatically apply the "Reject non-essential" preference on your behalf, consistent with Section 10.3 of the Privacy Policy. Because we do not currently sell or share personal information or use targeted advertising Technologies, honoring GPC in this way has the practical effect of confirming that no optional Analytics or Marketing Technology is enabled for you, without requiring you to interact with the banner. Do Not Track (DNT): Some browsers offer a legacy "Do Not Track" signal. There is no common industry or legal standard for how a website should respond to DNT, and we do not currently respond to a DNT signal. DNT is distinct from GPC, which we do honor as described above.

4. Technology inventory

The table below reflects the Technologies verified in the GreatSales AI™ codebase as of the effective date of this Policy. Where a duration is set by a third-party provider rather than by us, we describe it based on that provider's own documentation rather than asserting a specific value we do not control.

4.1 Technologies we do not use

We have not found, and do not currently use, any of the following in the Services: Google Analytics, Google Tag Manager, Meta Pixel, TikTok Pixel, Hotjar, Mixpanel, Segment, Amplitude, PostHog, Plausible, or any other analytics, heatmapping, or advertising-technology script. If we add any Technology in the Analytics or Marketing category described in Section 3.3, we will update this table, request your consent before it loads where required, and describe it here with the same level of detail as the Technologies above.

5. Third-party Technologies

5.1 Clerk

We use Clerk, Inc. to authenticate users and manage sessions. Clerk sets the Technologies described in Section 4 that are necessary for you to sign in and for us to keep your account secure. Clerk's own privacy and cookie practices are described in Clerk's Privacy Policy.

5.2 Google Maps Platform

Where address autocomplete is configured for your account, we load the Google Maps Platform script only within the authenticated workspace, to help you enter an address more quickly. Google's own practices for this Technology are described in Google's Privacy Policy.

5.3 Payment processors

For card subscriptions, Stripe loads its checkout technologies on the checkout page when you begin a paid subscription. Those Technologies are governed by Stripe's Privacy Policy.

6. Consent record retention

We retain a record of your consent choice, including the date, method, and notice version, for as long as reasonably necessary to honor your choice and to demonstrate compliance with applicable consent requirements, and in any event for no longer than three (3) years after your most recent choice or until you make a new choice, whichever occurs first. We do not use your IP address as a standalone means of proving consent; the consent record described in Section 3.2 is stored using the first-party mechanism described in Section 4. When we materially change the purposes, providers, or categories of Technologies we use, we will update the notice version referenced in Section 3.2, which will cause the consent banner to appear again so that you can make a new, informed choice.

7. Do Not Track and Global Privacy Control

As described in Section 3.4: we do not currently respond to a legacy Do Not Track browser signal, because there is no common industry or legal standard for how to interpret it; and we do honor the Global Privacy Control signal as an opt-out request under applicable U.S. state law, by automatically applying the "Reject non-essential" preference when we detect it and you have not already made an explicit choice for the current notice version. Global Privacy Control is distinct from, and is not required for, the opt-in consent model described in Section 3.1 that applies to visitors in the European Economic Area, United Kingdom, and Switzerland.

8. Updates to this Cookie Policy

We may update this Cookie Policy when we add, remove, or materially change a Technology, category, or provider described here, or to reflect a change in applicable law. We will update the "Last updated" date whenever we make a change, and, for a material change that affects your choices, we will provide additional notice, such as by refreshing the consent banner described in Section 3.1, before the change takes effect.