Privacy Policy

1. Introduction

NOVAX Platform (“NOVAX”, “we”, “us”, or “our”) provides a SaaS business management platform that helps businesses operate more efficiently. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website or use our services.

By using NOVAX, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.

2. Information We Collect

We collect the following types of information:

• Account information: name, email address, phone number, business name, and role when you register or are invited to a workspace.
• Business data: customer records, service requests, appointments, projects, tasks, documents, and other content you create or upload while using NOVAX.
• Usage data: IP address, browser type, device information, pages visited, and interactions with the platform, collected through cookies and similar technologies.
• Communication data: messages, support tickets, and feedback you send to us.
• WhatsApp data: only the information authorized through Meta's official WhatsApp Business authorization flow, such as the connected phone number, message status events, and incoming message metadata.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and improve the NOVAX platform.
• Authenticate users and manage workspace access.
• Deliver customer support and respond to inquiries.
• Send service-related notifications, updates, and security alerts.
• Maintain platform security, prevent fraud, and enforce our terms.
• Comply with legal obligations and protect our rights.

We do not sell, rent, or trade personal information to third parties for marketing purposes.

4. WhatsApp Business Integration

NOVAX integrates with the WhatsApp Business Platform through Meta's official Embedded Signup and authorization mechanism. A business may connect its WhatsApp number to NOVAX only after an authorized user explicitly approves the connection through Meta's consent screen.

Key points about the integration:

• NOVAX does not access your WhatsApp data beyond the permissions you grant during the Meta authorization flow.
• We do not read your personal WhatsApp conversations or contacts unless they are explicitly synced as part of the authorized business workflow.
• You can disconnect your WhatsApp account from NOVAX at any time from the Connections settings page.
• WhatsApp message delivery and related processing are subject to Meta's own terms and privacy practices.

5. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), encrypted storage, access controls, and regular security monitoring.

While we take reasonable steps to safeguard data, no method of transmission or storage is completely secure. We encourage users to protect their account credentials and report any suspected unauthorized access immediately.

6. Third-Party Services

NOVAX uses trusted third-party service providers for hosting, authentication, email delivery, analytics, and integrations. These providers are contractually bound to process data only on our behalf and in accordance with this policy.

When you choose to connect third-party integrations such as Meta/WhatsApp, Google, or other services, your data is shared with those providers according to their respective privacy policies and only to the extent necessary to operate the integration.

7. Data Retention

We retain your personal and business data for as long as your account is active or as needed to provide you with our services. If you delete your account or specific records, we will remove or anonymize the data within a reasonable period, unless we are required to retain it by law.

Backup and log data may be retained for limited periods for security, troubleshooting, and compliance purposes.

8. User Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your personal data.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Export your data in a commonly used format.

To exercise any of these rights, please contact us at the email address below.

9. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: