Privacy Policy

Controller

Novara is operated by Midori Labs LLC ("Midori Labs," "we," "us," or "our"). This Privacy Policy explains how Midori Labs collects, uses, shares, and protects information when you use Novara.

1. Information We Collect

We collect information you provide directly, including your name, email address, phone number, business information, customer records, and payment details. We also collect usage data such as pages visited, features used, and device information to improve the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities

3. Mobile App — Device Permissions

The Novara iOS app requests the following permissions only when you use the related feature. You may revoke any permission at any time in iOS Settings → Novara.

• Camera — used to capture photos of jobsites, leads, and evidence you attach to your work. Photos are stored in your account and never shared with third parties.
• Photo library — used to attach existing photos to jobs, leads, and evidence, and to optionally save photos you capture in the app to your device library.
• Microphone — used to record voice messages in the AI chat. Audio is processed on-device and via our servers solely to deliver chat functionality.
• Speech recognition— used to convert your voice to text in the AI chat. Apple's on-device speech recognition is used where available.
• Notifications — used to deliver job, scheduling, and customer-communication alerts. You control which notifications are enabled.

We do notuse the iOS App Tracking Transparency framework. We do not track you across other companies' apps and websites, and we do not sell your personal data to third parties.

4. Data Storage and Security

Your data is stored securely using industry-standard encryption at rest and in transit. We use Supabase and AWS infrastructure with SOC 2 compliant hosting. We implement access controls, audit logging, and regular security reviews to protect your information.

5. Data Sharing

We do not sell your personal information. We may share your information with third-party service providers who assist in operating our Service (payment processing, email delivery, analytics), subject to confidentiality obligations. We may also share information when required by law or to protect our rights.

6. Third-Party Integrations

When you connect third-party services (QuickBooks, Stripe, Zapier), those services have their own privacy policies. We only access the data necessary to provide the integration features you have enabled.

7. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We may use first-party analytics tools to understand how the Service is used. You can control cookie preferences through your browser settings.

8. Your Rights

You have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Export your data in a portable format

To delete your account and associated personal data, sign in and visit Settings → Account → Delete Account, or email privacy@novaraops.com from the address on file. We will complete the deletion within 30 days.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your data within 30 days, except where retention is required by law.

10. Children's Privacy

The Service is intended for use by businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related inquiries, please contact us at privacy@novaraops.com. Novara is operated by Midori Labs LLC.

Mailing address: Midori Labs LLC, 2810 N Church St Num 651765, Wilmington, DE 19802.