Privacy Policy
Honest, plain-English.

This Privacy Policy explains how NovaHaven INC (“we”, “our”, “CreativeTagbox”) collects, uses, and safeguards information when you visit our website or order a hashtag research pack. By using CreativeTagbox, you agree to the practices described here.

1. Information we collect

We collect only what we need to deliver and improve our service:

• Account & order data — name, email, password (hashed), billing details.
• Brief inputs — niche, audience, competitor accounts, content goals you submit when ordering.
• Communication — messages and attachments you send through our order chat or contact form.
• Usage analytics — anonymized page views, referrers, device and browser information (used for product improvement, not advertising).
• Cookies & pixels — see our Cookies Policy for the full list and how to opt out.

2. How we use it

We use your information to:

• Deliver the research pack you ordered and run support over the order chat.
• Process payments via our PCI-compliant payment processors.
• Send transactional emails (order updates, delivery, invoices). We never use these channels for marketing.
• Improve our research workflows and the tools researchers use internally.
• Comply with tax, accounting, and applicable legal obligations.

3. What we never do

We never sell, rent, or trade your personal information. We do not share your brief content with other clients. We do not use your data to train third-party AI models.

4. Sharing with service providers

Limited data is shared with carefully vetted vendors so we can run the business — for example, a payments processor for billing or an email provider for order notifications. Every vendor signs a data-processing agreement requiring protection at least equal to ours.

5. Security practices

• AES-256 encryption at rest and TLS 1.3 in transit for all sensitive data.
• Role-based access — only the researcher and reviewer assigned to your order can read its contents.
• Annual access reviews and quarterly security audits.
• Two-factor authentication required for all internal team accounts.

6. Your rights

You have the right to access, correct, export, or delete your personal information at any time. Email support@creativetagbox.com and we’ll respond within 5 business days. EU residents have additional rights under the GDPR; California residents under the CCPA — both honored regardless of where you reside.

7. Data retention

Order records are retained for 7 years for accounting and tax compliance. Brief content is purged 90 days after delivery unless you request earlier deletion. Account data is retained as long as your account is active and deleted within 30 days of a deletion request.

8. Children

CreativeTagbox is not directed at children under 13. We do not knowingly collect data from minors. If you believe a minor has submitted information, contact us and we’ll delete it immediately.

9. International transfers

Our infrastructure is hosted in the United States. By using CreativeTagbox, you consent to your information being processed in the U.S. We rely on Standard Contractual Clauses for transfers from the EU and UK.

10. Changes to this policy

We may update this policy as our practices evolve. Material changes will be announced via email and the “last updated” date above. Continued use after an update means you accept the revised terms.

11. Contact

Questions about this policy? Email support@creativetagbox.com or write to:

NovaHaven INC
10200 Forest Green Blvd, Suite 112, Louisville, KY 40223

Registered in Kentucky, United States.