Privacy Policy

NovaHub is a software platform that gives service businesses and independent professionals — barbershops, salons, tattoo and nail studios, spas and similar — a premium digital front desk: an in-store kiosk, an auto-generated website, a QR code, a printable card and analytics.

In this policy, “we”, “us” and “NovaHub” refer to the NovaHub platform. “You” means the account holder (a business owner or an independent professional). “Your customers” means the people who visit your kiosk, website or QR.

When you create and run your account, you give us:

• Account details — your name, email and password.
• Business or professional profile — business name and type, tagline, phone number, address, logo, brand colors, hours and similar settings.
• Team and profile content — professional profiles, photos, portfolio, specialties, experience, services and social or booking links you add.
• Billing details — your subscription plan and the payment information you enter with our payment processor. NovaHub does not store full card numbers.
• Support and communications — messages you send us and anything you choose to share.

As your kiosk, website and QR are used, we collect engagement and technical data:

• Interest signals — QR scans, page and profile views, “Book Now” clicks and kiosk interactions. These measure interest and intention, not bookings or payments.
• Aggregate patterns — busiest days and hours, most-viewed professional, most-wanted service.
• Device and log data — IP address, browser and device type, and timestamps, used for security and to run the service.
• Cookies and similar technologies — essential cookies to keep you signed in and product-analytics cookies to improve NovaHub.

When someone interacts with your kiosk, website or QR, we mostly process anonymous engagement data (such as a scan or a view). If you enable specific features — for example an in-kiosk payment button or the missed-call auto-SMS — limited personal data (such as a phone number) may be processed to deliver that feature.

For your customers’ personal data, you are the data controller and NovaHub acts as a processor on your behalf: we handle it only to provide the service to you and under your instructions.

We use the information above to:

• Operate your kiosk, website, QR and printable card, and keep them in sync.
• Show you analytics and calculated insights about interest and activity.
• Power Nova AI features you choose to use.
• Process your subscription and, for Nova Business, facilitate payments through your own provider.
• Communicate with you about your account, security and product updates.
• Protect NovaHub against fraud, abuse and security threats.
• Improve and develop the platform, and comply with legal obligations.

We never sell your personal data, and we do not use it for third-party advertising.

Nova AI works in controlled layers. Calculated insights (for example “bookings up 18%”) are produced with ordinary math from your own data — no AI is involved. The assistant and business questions send only the relevant, minimized business data needed to answer to a trusted AI provider, which returns an answer in plain language.

Your business data is not used to train third-party AI models, and AI usage is rate-limited and scoped to your own account.

We share data only with trusted service providers who process it to help us run NovaHub, each limited to its function:

• Supabase — database, authentication and file storage.
• Stripe — subscription billing and, for Nova Business, payment processing.
• SMS provider (e.g. Twilio) — the missed-call auto-SMS feature, when enabled.
• Email provider — account, security and product emails.
• AI provider (e.g. Anthropic) — Nova AI answers.
• Vercel — hosting and delivery of the platform.

We may also disclose information if required by law or to protect rights and safety, and in connection with a merger, acquisition or sale of assets (with notice where required).

NovaHub never stores your full card number. Subscription billing is handled by Stripe. For Nova Business owners who take payments, transactions run through your own connected payment provider — NovaHub helps you set it up and confirms results, but does not store card data. Bookings and their payments happen on the tools you already use (such as Booksy), not on NovaHub.

We keep information only as long as we need it, depending on its type:

• Active accounts — while your account is open and in use.
• Cancelled or deleted accounts — we remove or anonymize your content promptly after you delete it, with a short window (typically up to 30–90 days) while it clears from routine backups.
• Trial accounts that never convert — removed after a limited period of inactivity.
• Billing and tax records — kept for the period required by law, which may be several years, even after your account closes.

When data is no longer needed for these purposes, we delete or anonymize it.

You are in control of your data, directly inside NovaHub — you do not need to contact us to remove it:

• Access and edit — view and update your profile, team and content at any time from your dashboard.
• Export — download a copy of your business data from your account.
• Delete — remove individual items, your whole profile or team, or your entire account and its data yourself from Settings, whenever you want.
• Cancel — cancel your subscription at any time; access continues until the end of the paid period.

Depending on where you live, you may also have rights under laws such as the GDPR (EU/UK) or the CCPA/CPRA (California), including:

• The right to know and access the personal data we hold about you.
• The right to correct inaccurate data and to delete your data.
• The right to data portability (get a copy in a usable format).
• The right to opt out of the sale or sharing of personal data — NovaHub does not sell or share it for cross-context advertising.
• The right to limit the use of sensitive personal information.
• The right to object to or restrict certain processing.
• The right not to be discriminated against for exercising any of these rights.

You can exercise most of these directly in the app, and email us at info@novahubplatform.com for anything else.

We protect your data with encryption in transit, access controls and trusted infrastructure providers. No method of transmission or storage is completely secure, but we work continuously to safeguard your information and to notify you if a significant issue affects you.

NovaHub and its providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards to protect your information when it is transferred across borders.

NovaHub is a business tool intended for adults. It is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will remove it.

We may update this policy as NovaHub evolves. When we do, we will change the “last updated” date above and, for material changes, notify you in the app or by email. Your continued use after an update means you accept the revised policy.

Questions about privacy or this policy? Email us at info@novahubplatform.com. (To remove your data you don’t need to write — you can delete it yourself from your account at any time.)