novo SOLUTION - Privacy Policy

This Privacy Policy describes how novo SOLUTION ("novo SOLUTION", "we", "us") collects, uses, discloses, and protects information when you use our iOS app, associated websites, and related services (collectively, the "Services").

novo SOLUTION is developed and operated by Mohammad Reghabi, an individual located in Vancouver, British Columbia, Canada.

If you are using novo SOLUTION on behalf of a business, your business may be the "Customer" under a separate agreement (for example, an enterprise plan). In that case, we process information as described below and as required to provide the Services.

1. SCOPE

This Policy applies to:

This Policy does not apply to third-party websites, platforms, or services that you connect to novo SOLUTION. Those third parties have their own policies.

1A. WHO THIS POLICY COVERS

Different parts of this Policy apply to different people:

Where a business stores information about its own customers, employees, suppliers, or other individuals in the Services, that business is responsible for that information and is the primary point of contact for requests about it. Our role is described in Section 2A.

2. INFORMATION WE COLLECT

The information we collect depends on which features you use and which integrations you connect.

2A. Access to Your Data and Your Control

Practical impact: Many privacy requests (for example, changes to customer records you entered) should be directed to the business owner/admin using the Services. Where we do have control over server-side data (for example, stored OAuth tokens, anonymous analytics, and security logs), we can help process requests as described below.

2.1 Account and Business Profile Information

We may collect and process:

2.2 Business Data You Choose to Store in the Services

You (and your team) may store business records such as:

Important: Some of this data may include personal information about your customers or contacts. You control what you upload and how you use it.

2.3 Technical, Device, and Diagnostic Information

We automatically collect technical information needed to operate and secure the Services, such as:

We minimize collection of directly identifiable personal data in diagnostic and security logs; we also use redaction/sanitization where feasible.

2.4 Analytics and Usage Data (Privacy-First)

If you enable analytics and provide required consent in the app, we may collect:

By default, analytics features are privacy-first and can be disabled in settings. Some minimal operational telemetry may still be necessary for security and reliability.

This section describes analytics about your use of the app. Analytics about visitors to your public storefront are described separately in Section 2.14, and analytics about your marketing messages are described in Section 2.13. Those are business records that belong to you, not anonymous app telemetry.

2.5 Integration Data (OAuth Connections and Webhooks)

If you connect third-party services, we may collect:

Integrations you may connect include:

We do not collect or store your third-party account passwords. Connections are established using OAuth or using credentials you supply, which are stored encrypted.

2.6 Payment Data

When you use payment features, payment processing is generally handled by third-party payment processors and/or terminal providers. Depending on the feature, we may process:

We aim to avoid storing full payment card numbers and other sensitive payment credentials on our systems; those are typically handled by the payment provider under their own terms.

2.7 AI Features Data (Optional — User-Initiated)

novo SOLUTION includes optional AI-powered features. All of them are opt-in, and the app is fully usable without enabling any of them. Current AI-assisted features include:

AI ASSISTANTS AND YOUR DATA

Which AI options exist:

Tier model:

Consent and control:

HOW YOUR DATA REACHES AN AI PROVIDER

There are two different routes, and they have different privacy consequences.

Apple Intelligence requests are handled by Apple on-device or through Apple Private Cloud Compute and do not pass through our servers.

AI PROVIDERS

Depending on the feature and how you have configured it, content you provide (such as product names, descriptions, images, page content, and prompts) may be sent to:

TEXT AND VISION

Privacy Policy: openai.com/privacy

Privacy Policy: policies.google.com/privacy

Privacy Policy: apple.com/legal/privacy

IMAGE GENERATION AND PHOTO PROCESSING (bring-your-own-key only)

VIDEO GENERATION (bring-your-own-key only)

SPEECH AND VOICE

CONNECTED DESKTOP ASSISTANTS

Image, video, and voice generation are available only with your own API key. They are not offered through Novo-hosted AI credits, and you are billed by the provider directly.

Key facts about AI features:

There is no novo SOLUTION AI chatbot that talks to visitors on your public website. Where a chat widget appears on your storefront, it is a third-party service you enabled — see Section 2.14.

For more information on how each provider handles your data, please refer to their respective privacy policies linked above.

2.8 Tax API Provider Data (Optional — User-Configured)

novo SOLUTION includes optional integrations with third-party tax calculation services to assist with real-time tax calculations. These integrations are entirely optional and only active when you choose to configure them with your own credentials.

When you enable a Tax API Provider, transaction data may be sent to that provider to perform tax calculations. This data may include:

The Tax API Providers currently supported are:

TAX CALCULATION

Privacy Policy: taxjar.com/privacy

Privacy Policy: avalara.com/us/en/legal/privacy-policy.html

Privacy Policy: stripe.com/privacy

Key facts about Tax API Provider integrations:

2.9 Subscription Data

If you purchase a subscription through Apple's App Store, Apple handles billing and payment processing. We receive limited subscription status information from Apple (such as subscription tier, expiration date, and renewal status) to provide you with the appropriate level of service. We do not receive or store your Apple ID password or full payment details.

2.10 Novo Voice and Speech Data (Optional)

Novo Voice is an optional in-app assistant that lets you operate novo SOLUTION by speaking. It is not a phone system: it does not answer, place, or record telephone calls. If you ask it to call a client, it hands the number to the iPhone Phone app and the call takes place outside novo SOLUTION.

Speech recognition:

What happens to the recognized text:

Spoken replies:

Conversation memory:

Failed command reporting:

Voice preferences and corrections you make are stored in an encrypted file on your device.

Novo Voice can change your business data — for example, creating an invoice — but only within the permissions of the signed-in user, only for features included in your plan, and, for higher-risk actions, only after you explicitly confirm. Questions answered by the assistant's answer engine are read-only.

2.11 Employee Access from Personal Devices ("Managed Staff")

A business can invite employees to access its account. An employee may sign in from their own personal iPhone or iPad. This section describes what we collect about the employee and their device, and is written primarily for employees.

How access is granted:

What we collect about the employee:

What we deliberately do not collect from an employee's personal device:

Separation from the employee's personal data:

Employer visibility and controls. The business can set and change an employee's role, permissions, and assigned locations; suspend or revoke access; and see the business records the employee creates or changes, since those are the business's own records. Where the business uses shift, clock-in, or tip features, those records are visible to the business as well. The business cannot use novo SOLUTION to remotely erase an employee's personal device, read their personal content, or track their location — those capabilities do not exist in the Services.

When access ends. When a business revokes an employee's access or the employee signs out, all server-side sessions and device registrations for that membership are deleted, and the employer's cached workspace, files, and queued work are deleted from the personal device. To avoid losing work, deletion waits until any unsent entries the employee created have been transmitted. Nothing else on the personal device is affected, and other employers' workspaces on the same device are untouched.

Employer responsibility. The employing business is responsible for telling its employees what it monitors, obtaining any consent required by local employment or privacy law, and complying with law when it reviews employee activity records.

2.12 Novo Market and Client Accounts

Where enabled, Novo Market lets an individual create a single client account and use it to discover, follow, join, book with, and order from participating businesses that use novo SOLUTION. Availability can be turned off by us at the platform level and by each business for its own store.

Important: each participating business sells its own goods and services and is the seller. novo SOLUTION provides the software and the directory. We are not the seller, and we do not take title to any goods.

What we collect for a client account:

What we collect per participating business you join:

Who sees what:

What is published publicly. A participating business that has opted in appears in the Novo Market directory with its business name, description, logo, business type, address and coordinates, business phone, email and website, hours, its catalog of products and services with prices and images, and aggregate counts such as number of members and followers. Individual client identities are not published, and Novo Market does not host public client reviews or profiles.

Payments and fulfillment. Payments are processed by the business's own payment processor account, either directly or through a connected account. Where a connected account is used, we may collect a platform fee, disclosed in the Terms of Service. The business is responsible for fulfilling orders, honouring bookings, and handling cancellations, returns, refunds, and disputes. Contact the business first about any order issue.

Age. Creating a client account requires a date of birth, and registration is refused for anyone under 13. See Section 10.

Your controls. From your client account you can export your data and request deletion. See Section 9.3.

2.13 Marketing Communications Data (Email and SMS)

If a business uses the marketing features, novo SOLUTION processes information about the recipients of that business's messages. The business decides who is contacted and is responsible for having a lawful basis and valid consent to contact them.

Email:

If you receive marketing email sent through novo SOLUTION and do not want your opens and clicks measured, you can disable remote image loading in your mail app and avoid clicking tracked links, or unsubscribe using the link in the message.

SMS:

Automated messages. Businesses can configure messages that send automatically in response to events such as an order, an abandoned cart, an appointment reminder, or a birthday. This uses the customer record the business already holds.

Newsletter sign-up prompts on a business's website store a value in the visitor's browser so the prompt is not shown again for a period.

2.14 Public Storefront and Website Visitor Data

When someone visits a business's public storefront or website built with novo SOLUTION, we process the following on that business's behalf.

Third-party components that may appear on a business's storefront:

2.15 Financing and Credit Application Data (Where Enabled by a Business)

Some business types — for example vehicle dealerships — can enable financing or credit application features. Where a business enables them, an applicant may be asked to provide their full name, residential address, date of birth, contact details, employment or income information, and a government-issued identifier such as a Social Insurance Number or Social Security Number, together with the applicant's consent.

3. HOW WE USE INFORMATION

We use information for purposes such as:

4. LEGAL BASES FOR PROCESSING

Where applicable (for example, under GDPR), we process information under one or more legal bases, including:

5. HOW WE SHARE INFORMATION

We do not sell your personal information. We may share information:

6. SECURITY

We use administrative, technical, and physical safeguards designed to protect information, such as encryption in transit, access controls, and monitoring. Measures include:

No method of transmission or storage is 100% secure; however, we work to meet enterprise-grade security expectations appropriate for the Services.

7. DATA RETENTION

We retain information for as long as your account is active or as needed to provide the Services, and as needed for backups, synchronization, dispute resolution, and compliance with legal obligations. Specific retention periods include:

8. YOUR RIGHTS AND CHOICES

Depending on your jurisdiction, you may have the right to:

You can also manage certain privacy settings directly in the app (for example, analytics toggles and integration connections).

8A. Operational Telemetry (Security and Reliability)

Even if you disable optional analytics, we may still process minimal operational telemetry strictly for security, abuse prevention, and service reliability. Examples may include:

We use this information to protect the Services (for example, detect abuse, enforce access controls, investigate incidents, and prevent fraud). We do not use operational telemetry for behavioral advertising.

8B. Cookies and Similar Technologies

When you use our web properties (for example, the admin portal or your connected website), we may use cookies, browser storage, or similar technologies for:

We do not intentionally use third-party advertising cookies by default. A business may add its own advertising or analytics tags to its website, in which case that business is responsible for providing notice and obtaining consent where required. If we introduce optional analytics or advertising cookies on our own web properties in the future, we will provide appropriate notice and choice mechanisms where required by law.

Do Not Track: Some browsers offer a "Do Not Track" setting. Because there is no consistent industry standard for DNT signals, our web properties may not respond to DNT signals.

8C. International Transfers

novo SOLUTION may process and store information in countries other than where you live (for example, where we or our service providers operate). Where required (for example, transfers from the EEA/UK), we use appropriate safeguards such as standard contractual clauses or other lawful transfer mechanisms.

8D. Subprocessors and Service Providers

We use vendors ("subprocessors") to help provide the Services. Categories and current principal vendors include:

Some of these are used only if you turn on the relevant feature or connect the relevant account. An up-to-date list can be requested by contacting us.

8E. Sensitive Data

Unless expressly agreed in writing, or unless a specific feature is designed to collect it as described below, you must not upload or store:

Exception — financing and credit features. Where you enable the financing or credit application features described in Section 2.15, those features are designed to collect an applicant's date of birth and a government-issued identifier such as a Social Insurance Number or Social Security Number. That collection is permitted within those features only. You remain responsible for obtaining valid consent, for complying with all applicable consumer credit and privacy law, and for restricting access to that information within your own team.

The Services are not designed to support HIPAA compliance and should not be used to store Protected Health Information unless you have a separate written agreement with us that specifically covers such use.

8F. Marketing Communications

We may send service-related communications (for example, account, security, billing, and service notices). Where we send marketing communications, you can opt out using the unsubscribe mechanism provided in the message or by contacting us, subject to legal requirements.

This section is about messages novo SOLUTION sends to you. Messages a business sends to its own customers through the Services are covered by Section 2.13, and the sending business — not novo SOLUTION — is responsible for consent and for honouring opt-outs.

We may also send push notifications to your device (for example, order, appointment, and usage-limit notifications). You can turn push notifications off in iOS Settings at any time.

9. DATA DELETION (INCLUDING ACCOUNT DELETION)

9.1 Account Deletion

novo SOLUTION provides a complete account deletion feature directly within the app, in compliance with Apple App Store requirements.

How to Delete Your Account: 1. Open the novo SOLUTION app 2. Navigate to Settings > Account 3. Tap Delete Account 4. Confirm your decision when prompted

What Happens When You Delete Your Account:

Important Subscription Information:

Important Notes:

Timing:

9.2 Deleting Social Media Connection Data

You can disconnect social media integrations and delete associated connection data using the in-app "Delete All Social Media Data" option, which is designed to:

Important notes:

For deletion assistance beyond in-app controls, contact us (see "Contact").

9.3 Deleting a Novo Market Client Account

If you hold a client account (Section 2.12), you can export your data and request deletion from within your account.

9.4 Employee Offboarding

When a business revokes an employee's access, or the employee signs out, the effects described in Section 2.11 apply: all server-side sessions and device registrations for that membership are deleted, and the employer's cached workspace, files, and queued work are removed from the employee's personal device. The employee's own account record and the record of the business activity they performed remain with the business, because those are the business's records.

An employee who wants their personal account record deleted should contact the business they worked for. Where we control the record, we will assist as described in Section 12.

10. CHILDREN'S PRIVACY

The Services are intended for business use and are not directed to children.

If you believe a child under 13 has provided personal information, contact us and we will delete it.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy at any time, without prior notice, to the extent permitted by law. The updated version will be posted in the Services and will be effective when posted (or as otherwise stated). If notice is required by applicable law for certain changes, we will provide the required notice.

12. CONTACT

For privacy questions or requests: Email: support@novosolution.org

For legal notices: Email: support@novosolution.org

Submitting Privacy Requests:

To submit a privacy request (access, deletion, correction, portability), email us with:

For security, we may need to verify your identity before processing your request. If you are acting on behalf of a business account, we may require proof of authority. We aim to respond within applicable legal timeframes (commonly 30-45 days, depending on your jurisdiction and the nature of the request).

Where to direct your request:

Last Updated: August 21, 2026

Novo Voice Command Improvement

When Novo Voice (our in-app voice assistant) is unable to understand or complete a command you ask it to perform, we collect only the text of that specific failed command or request — never your business data, customer data, or any other part of the surrounding conversation — so our team can review it and add support for new commands. This information is used solely to improve the Novo Voice feature.

Version 1.0.14 • Last updated: 8/22/2026