NovaReach Privacy Policy

1. Overview

Nova Reach provides CRM, marketing automation, AI voice agents, AI chatbots, appointment scheduling, communication tools, workflow automation, sales pipeline management, and other business growth solutions designed to help organizations manage customer relationships and streamline operations. This Privacy Policy applies to information collected directly from users of the Platform, visitors to our website, and individuals who interact with our services. When our customers use Nova Reach to collect, manage, or process information relating to their own customers, leads, prospects, or contacts, Nova Reach acts as a service provider or data processor on behalf of those customers, and the customer’s own privacy policy may govern how that information is collected and used. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of information as described herein. If you do not agree with this Privacy Policy, please discontinue use of the Platform. We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or business practices. Any updates will be posted on this page with a revised "Last Updated" date, and continued use of the Platform after such changes constitutes acceptance of the updated Privacy Policy.

2. Information Nova Reach Collects About You

We collect information about you ("Personal Information") in several ways. Directly from you: we collect Personal Information you voluntarily provide when you create an account, subscribe to our services, request a demo, schedule an appointment, purchase a subscription, contact our support team, join our mailing list, or otherwise interact with NovaReach.digital, this may include your name, email address, phone number, company name, billing information, payment details, communication preferences, account credentials, and other information necessary to provide our services. If you provide Personal Information on behalf of another individual, including your employees, customers, or business contacts, you represent that you have the necessary authority and consent to share that information and permit us to process it in accordance with this Privacy Policy. From third parties: we may receive Personal Information from trusted sources such as marketing and advertising partners, social media platforms, payment processors, communication providers, analytics services, identity verification providers, integration partners, publicly available databases, and other business partners to help us improve our services, verify accounts, prevent fraud, and personalize your experience. Collected automatically: when you access the Platform we automatically collect information about your device and interactions, including your IP address, browser type, operating system, device identifiers, pages visited, features used, session duration, referral URLs, log files, usage statistics, and diagnostic information, and we use cookies, pixels, web beacons, and similar tracking technologies as described in our Cookie Policy.

3. How Nova Reach Uses Your Personal Information

NovaReach.digital uses the Personal Information we collect to deliver, maintain, improve, and protect our platform and services. We use it to provide and improve our services (CRM management, marketing automation, communication tools, appointment scheduling, AI-powered services, websites, funnels, payment processing, and business management features), to personalize your experience, troubleshoot technical issues, monitor reliability, and develop new features. Information submitted through AI-powered features (AI Chatbots, AI Voice Agents, AI content assistance, conversation analysis, and workflow automation) is processed only to provide the requested functionality, we do not use your private business information or customer data to train publicly available AI models, and where necessary AI requests may be securely processed by trusted third-party providers under contractual restrictions. We also use your information for customer support, business administration (managing subscriptions, processing invoices and payments, detecting fraud, and enforcing our agreements), account and service communications, and, with your consent or where permitted by law, marketing communications you may opt out of at any time. Additional uses include platform security and fraud prevention, analytics and service improvement (using aggregated or anonymized data where possible), marketing and personalization, and compliance with legal obligations. We do not sell your Personal Information to third parties for monetary compensation.

Legal Basis for Processing

Where required by applicable privacy laws, including the General Data Protection Regulation (GDPR) and similar data protection laws, NovaReach processes Personal Information only when there is a valid legal basis for doing so. Depending on the circumstances, our legal basis may include your consent, performance of a contract with you, compliance with legal obligations, or our legitimate business interests, provided such interests do not override your fundamental rights and freedoms. Examples of legitimate interests include maintaining platform security, preventing fraud, improving our products and services, providing customer support, developing new functionality, and operating our business efficiently. Where we rely on your consent, you may withdraw it at any time; withdrawal will not affect the lawfulness of any processing carried out before it was withdrawn. If you have questions regarding the legal basis for any specific processing activity or wish to exercise your privacy rights, you may contact us using the details in the Contact Us section.

4. How Nova Reach Protects Your Information

At NovaReach.digital, protecting your Personal Information is one of our highest priorities. We implement appropriate administrative, technical, and organizational security measures designed to safeguard your information against unauthorized access, loss, misuse, alteration, disclosure, or destruction. Our security practices may include encryption of data in transit, secure authentication mechanisms, access controls, infrastructure monitoring, regular security updates, vulnerability assessments, backup procedures, and other industry-standard safeguards. We also work with carefully selected third-party service providers who are contractually required to maintain appropriate security standards. While we take reasonable steps to protect your information, no method of transmitting or storing data can be guaranteed to be completely secure, so NovaReach cannot guarantee absolute security. You also play an important role: use strong passwords, enable multi-factor authentication where available, keep your credentials confidential, and notify us immediately if you suspect any unauthorized access or security incident.

5. When Nova Reach Shares Your Information

NovaReach.digital values your privacy and does not sell your Personal Information. However, to operate our platform, deliver our services, and comply with legal obligations, we may share your information with trusted third parties: affiliates and group companies for legitimate business purposes; carefully selected service providers (cloud hosting, payment processing, customer support, email delivery, messaging, infrastructure management, security monitoring, analytics, AI processing, and technical support) who may access Personal Information only as necessary and under confidentiality obligations; and technology partners and integrations you choose to connect (such as Google, Meta, Microsoft, Pinterest, Stripe, Twilio, or Zoom), whose own terms and privacy policies also govern your use. We may share information with marketing and communication partners who process it solely for purposes we authorize, and, in the event of a merger, acquisition, investment, restructuring, financing, or asset sale, as part of that business transaction, with successors required to continue protecting your information. We may also disclose Personal Information to comply with applicable laws, respond to lawful requests, protect the rights, property, safety, or security of NovaReach and others, detect or prevent fraud and abuse, and enforce our agreements. Where you specifically request or authorize sharing, we will do so only in accordance with your instructions.

SMS and Communication Consent

NovaReach respects your communication preferences. Your mobile phone number, SMS opt-in information, messaging consent, and related communication preferences are not sold, rented, or shared with third parties for their independent marketing purposes. Where necessary to deliver messaging services, this information may be shared only with authorized communication providers, telecommunications carriers, or messaging infrastructure partners that facilitate the delivery of SMS, voice calls, or other communication services on behalf of NovaReach.

6. Data Retention

NovaReach.digital retains Personal Information only for as long as it is necessary to provide our services, fulfill the purposes described in this Privacy Policy, and comply with applicable legal, regulatory, accounting, tax, or contractual obligations. The retention period depends on factors including the nature of the data, the services you use, legal requirements, security considerations, and our legitimate business needs, and we may retain certain information where necessary to resolve disputes, enforce our agreements, protect our legal rights, prevent fraud, or respond to regulatory or legal requests. When Personal Information is no longer required, we will securely delete, anonymize, or de-identify it. Anonymous or aggregated data that no longer identifies an individual may be retained for analytics, research, product development, and business reporting. Where permitted by applicable law, you may request the deletion of your Personal Information as described in the Your Privacy Rights section.

7. Children's Privacy

NovaReach.digital is intended for businesses and individuals who are legally permitted to use our services. We do not knowingly collect, solicit, or process Personal Information from children under the age of 16, or the minimum age required by applicable law in your jurisdiction. If we become aware that Personal Information has been collected from a child without appropriate parental or legal guardian consent, we will take reasonable steps to delete such information as soon as practicable. If you believe a child has provided Personal Information through the NovaReach platform, please contact us using the details in the Contact Us section.

8. Third-Party Websites and Services

The NovaReach platform may contain links to third-party websites, applications, integrations, marketplaces, or online services for your convenience. These services operate independently from NovaReach and are governed by their own terms, privacy policies, and security practices. This Privacy Policy applies only to information collected and processed by NovaReach.digital, and we are not responsible for the content, privacy practices, security measures, or data handling activities of any third-party services we do not own or control. If you connect your NovaReach account with external services, such as Google, Microsoft, Meta, Pinterest, Stripe, Twilio, or Zoom, you acknowledge that certain information may be exchanged to enable the requested functionality, subject to those providers’ privacy policies. We encourage you to review the privacy policies of any third-party service before providing Personal Information or authorizing data sharing.

Pinterest Integration

NovaReach lets you connect your own Pinterest account so you can create, schedule, and publish Pins to your boards from the Social Planner. Connecting is optional and happens only when you click "Connect Pinterest" and approve access on Pinterest’s own authorization screen. We never see or store your Pinterest password. Each NovaReach user connects their own Pinterest account, and a connected account is used only within the workspace of the user who connected it. This section explains what we access, how we use it, and how you stay in control.

• Permissions we request: user_accounts:read (to read your basic account profile), boards:read (to list your boards so you can choose where Pins are published), pins:read (to read Pins you have published through NovaReach), and pins:write (to create Pins on your behalf). We request only the permissions needed for these features.
• Information we store: your Pinterest username, display name, profile image, and account type; the access token, refresh token, token expiry, and granted permissions issued by Pinterest; the names and IDs of your boards and the default board you select; and the content of Pins you create in NovaReach (caption, title, link, and media).
• How we use it: only to show which Pinterest account is connected, let you choose a board, and publish or schedule the Pins you create. A Pin is published only when you, or a team member with access to your workspace, publishes it or schedules it for a set time. We do not post, edit, or delete Pins without such an action.
• What we do not do: we do not sell Pinterest data, use it for advertising or profiling, share it with third parties for their own purposes, use it to train AI models, or combine it with data from other Pinterest users. Pinterest data is not used for any purpose other than providing the features described here.
• Sharing: Pinterest data is sent only to Pinterest, to carry out the actions you request, and to our hosting and infrastructure providers, who process it on our behalf under confidentiality obligations.
• Security: access tokens are kept on our servers, are never exposed in the browser or to other users, and are accessible only to the systems that publish on your behalf, protected by the safeguards described in the How Nova Reach Protects Your Information section.
• Retention and disconnecting: we keep your Pinterest connection data while your account stays connected. When you click Disconnect in Social Media Settings, we delete the stored tokens, profile details, and board information for that account from our systems. Pins already published to Pinterest stay on Pinterest, and you can manage or delete them there.
• Revoking access: you can also revoke NovaReach’s access at any time from the apps section of your Pinterest account settings at https://www.pinterest.com/settings. After revocation, NovaReach can no longer read your account or publish Pins.
• Deletion requests: to request deletion of all Pinterest data associated with your NovaReach account, email privacy@novareach.digital with the subject line "Pinterest Data Deletion Request", including your Pinterest username and your registered NovaReach email address. We will confirm your request and delete the data in accordance with applicable privacy laws.
• Your use of Pinterest remains subject to Pinterest’s own Terms of Service and Privacy Policy, available at https://policy.pinterest.com/privacy-policy.

Google User Data and YouTube API Services

NovaReach lets you sign in with Google and connect selected Google services to your account. Connecting a Google service is optional and happens only when you choose to connect it and approve access on Google’s own consent screen. We never see or store your Google password. This section explains which Google user data we access, how we use it, and how you stay in control.

• Google Sign-In (openid, email, profile): used to create your NovaReach account and let you sign in with Google.
• Google Calendar (calendar.readonly, calendar.events): used to list your calendars, check free and busy times so the same time slot is not booked twice, and create, update, or cancel events for appointments booked through NovaReach.
• YouTube (youtube.upload, youtube.force-ssl): used to show which YouTube channel is connected in the Social Planner, upload the videos you publish or schedule to YouTube from the Social Planner, and load the comments on your videos in the Social Planner Comments tab so you can reply to, hide, or delete them. Comments are replied to, hidden, or deleted only when you take that action.
• Google Sheets (spreadsheets): used to add rows, such as new leads, to the spreadsheet you link in a workflow step.
• Google Business Profile (business.manage): used to show your business locations and reviews, publish the review replies you write or approve (including automatic replies if you turn them on), update the business details you choose to sync, such as phone number and website, and publish the posts you create in the Social Planner.
• Limited Use: NovaReach’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
• What we do not do: we use Google user data only to provide and improve the user-facing features described above. We do not sell Google user data; we do not use or transfer it for advertising, including retargeting or personalized ads; we do not use it to determine creditworthiness or for lending purposes; and we do not use it to develop, improve, or train generalized or non-personalized AI or machine learning models.
• Human access: we do not allow humans to read your Google user data, except with your explicit permission (for example, when you ask our support team for help), when necessary for security purposes such as investigating abuse, to comply with applicable law, or when the data is aggregated and anonymized for internal operations.
• Sharing: Google user data is shared only as needed to provide the features you use: with Google, to carry out the actions you request, and with service providers that operate parts of our platform on our behalf, such as hosting, infrastructure, and AI processing when you choose to use AI features, under confidentiality obligations. We may also disclose it where required by law. We do not transfer Google user data for any other purpose.
• Security: access and refresh tokens are stored on our servers and accessible only to the systems that provide the features you connected, and data is transmitted using encrypted connections. We apply reasonable technical and organizational safeguards, as described in the How Nova Reach Protects Your Information section above.
• Retention and disconnecting: we keep your Google connection data only while the service stays connected. When you disconnect Google Calendar, Google Sheets, or Google Business Profile in NovaReach, we delete the stored access and refresh tokens for that service. When you disconnect YouTube, we delete the stored tokens and the channel information we received from YouTube, such as its title, description, thumbnail, and statistics. Records you chose to create or import in NovaReach, such as contacts, leads, files, posts, and scheduled videos, remain in your account until you delete them.
• YouTube data: at least every 30 days we confirm that each connected YouTube channel is still authorized and refresh the channel information we store. If access has been revoked, we delete the stored tokens and channel information received from YouTube.
• Revoking access: you can revoke NovaReach’s access to your Google account, including YouTube, at any time from your Google Account security settings at https://security.google.com/settings/security/permissions. After revocation, the stored tokens stop working and NovaReach can no longer access your Google data.
• Deletion requests: to request deletion of Google user data associated with your NovaReach account, email privacy@novareach.digital with the subject line "Google Data Deletion Request", including your Google account email address and your registered NovaReach email address. We will delete the data as soon as possible, and YouTube API data no later than 7 calendar days after we receive your request.
• YouTube API Services: NovaReach uses YouTube API Services. By connecting your YouTube channel, you agree to be bound by the YouTube Terms of Service at https://www.youtube.com/t/terms. Google’s use of your information is governed by the Google Privacy Policy at https://policies.google.com/privacy.

9. Do Not Track (DNT)

Some web browsers offer a Do Not Track (DNT) setting that allows users to indicate their preference not to be tracked across websites. At this time, there is no universally accepted standard for recognizing or responding to DNT signals, so NovaReach.digital does not currently alter its data collection or processing practices based on these browser settings. You may still manage cookies, tracking technologies, and certain data collection preferences through your browser settings or the options described in our Cookie Policy.

10. Your Privacy Rights

NovaReach.digital is committed to protecting your privacy and respecting your rights regarding your Personal Information. Depending on your country, state, or region of residence, you may be entitled to certain rights under applicable privacy and data protection laws. These rights may include the ability to:

• Request access to the Personal Information we hold about you.
• Correct or update inaccurate or incomplete information.
• Request deletion of your Personal Information where permitted by law.
• Receive a copy of your Personal Information in a portable format.
• Restrict or object to certain types of data processing.
• Withdraw consent where processing is based on your consent.
• Manage your marketing and communication preferences.
• Lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

11. Privacy Rights for United States Residents

If you reside in a U.S. state with applicable privacy legislation, including California, Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, or any other state that enacts similar laws, you may be entitled to rights regarding your Personal Information. These may include the ability to access, correct, or delete your Personal Information, or obtain a copy of it (subject to retention required to comply with legal obligations, resolve disputes, enforce agreements, protect our business interests, or complete transactions initiated before your request). We may verify your identity before processing any request. Where required by law, you may opt out of the use of your Personal Information for targeted advertising or similar activities; NovaReach.digital does not sell your Personal Information for monetary value, though some laws may classify certain advertising or analytics activities as "sharing" or "targeted advertising." If your request is denied, you may submit an appeal using the contact details in this Privacy Policy. Where permitted by law, you may authorize an agent to submit a request on your behalf, subject to verification. If we process sensitive Personal Information, we do so only for legitimate business purposes, with your consent where required, or as otherwise permitted by law. We may use automated technologies to improve functionality, security, fraud prevention, and analytics, but we do not make decisions based solely on automated processing that produce legal or similarly significant effects unless permitted by law.

Categories of Personal Information (U.S. Residents)

Depending on how you use the NovaReach platform, we may collect the following categories of Personal Information and process them for the purposes and with the recipients described below.

• Categories collected: personal identifiers (name, email, phone, company name, IP address, account details); commercial information (subscription details, purchases, invoices, transaction history); internet and device activity (browser information, usage logs, session data, platform interactions); communication records (support requests, chat conversations, emails, appointment history); professional or business information; and preference and analytics data.
• Why we process it: to deliver and maintain our platform, provide customer support, process subscriptions and payments, secure our systems and prevent fraud, improve products and services, communicate important account and service information, analyze platform performance and usage, and comply with legal and regulatory obligations.
• Categories of third parties we may share with: cloud hosting and infrastructure providers; payment processing partners; customer communication providers (email, SMS, and voice); AI service providers; analytics and security service providers; business integration partners; professional advisors and legal service providers; and government authorities or regulators where required by law.
• SMS privacy: your mobile phone number, SMS consent, messaging preferences, and text message opt-in information are never sold or shared for independent marketing purposes and are shared only with authorized messaging providers and telecommunications partners as necessary to deliver SMS, voice, authentication, or notification services you request.

12. Privacy Policy Updates

NovaReach.digital may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices. When we make material changes, we will update the "Last Updated" date at the top of this Privacy Policy, and where required by applicable law we may also provide additional notice through our website, platform, or by email. Your continued use of the NovaReach platform after any updates become effective constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way NovaReach.digital collects, uses, or protects your Personal Information, please contact our Privacy Team at privacy@novareach.digital or visit https://novareach.digital. For privacy-related requests, including requests to access, correct, or delete your Personal Information, please email privacy@novareach.digital, and we will review and respond in accordance with applicable privacy laws. If you are an authorized representative submitting a request on behalf of another individual, we may ask for additional information to verify your authority before processing the request.