Privacy Policy
Last updated: 8 July 2026
This Privacy Policy explains how Noventa Solutions ("Noventa", "we", "us") collects, uses, shares, and protects personal data when you use Noventa Solutions at noventasolutions.co and app.noventasolutions.co (the "Service"). We are the data controller for the personal data described here.
Payments. We do not collect or store your card details. All payments are processed by Paddle.com Market Ltd, our Merchant of Record, which acts as an independent data controller for payment data. See "Payments & Paddle" below.
1. Information we collect
| Category | Examples | Why we collect it |
|---|---|---|
| Account data | Name, business email, password (hashed), organization name | To create and secure your account |
| Usage data | Features used, pages viewed, actions taken, log/device data, IP address | To operate, secure, and improve the Service |
| Content data | Process records, KPIs, datasets, documents and other content you upload | To provide the Service to you (you control this content) |
| Communications | Emails, support requests, early-access sign-ups | To respond to you and send service notices |
| Payment metadata | Plan, subscription status, renewal date (from Paddle, not card numbers) | To grant the correct plan entitlements |
2. How we use your information
- to provide, maintain, and secure the Service;
- to manage your account, organization, and subscription entitlements;
- to send transactional and service messages (e.g. notifications, security, billing status);
- to provide support and respond to your requests;
- to analyze usage and improve features and performance;
- to comply with legal obligations and enforce our Terms.
3. Legal bases (where GDPR applies)
We process personal data on the bases of: performance of a contract (to provide the Service you subscribe to), legitimate interests (to secure and improve the Service), consent (e.g. optional marketing, where applicable), and legal obligation (e.g. tax and accounting records held via Paddle).
4. Payments & Paddle
When you purchase a subscription, the transaction is processed by Paddle.com Market Ltd as Merchant of Record. Paddle collects your billing and payment information directly and processes it as an independent controller under its own Privacy Policy. We receive only limited billing metadata from Paddle (such as your plan, subscription status, country, and renewal date), never your full card number. We use this metadata to activate and manage your subscription.
5. Sharing your information
We do not sell your personal data. We share it only with:
- Paddle, for payment processing and tax compliance;
- Infrastructure & sub-processors, such as hosting, database (Supabase), email delivery, and analytics providers that process data on our behalf under contract;
- Legal & safety, where required by law, regulation, or to protect rights and safety;
- Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this Policy.
6. International transfers
Your data may be processed in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses or the recipient's adequacy status.
7. Data retention
We keep your personal data for as long as your account is active and as needed to provide the Service. After account closure we delete or anonymize your data within a reasonable period, except where we must retain records to meet legal, tax, or accounting obligations (payment records are retained by Paddle per its policy).
8. Your rights
Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing or withdraw consent. To exercise these rights, contact us at support@noventasolutions.co. You may also lodge a complaint with your local data protection authority. For payment-related data, you may contact Paddle directly.
9. Security
We use administrative, technical, and organizational measures, including encryption in transit, hashed credentials, access controls, and tenant isolation, to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information and notify you of significant incidents as required by law.
10. Cookies
We use strictly necessary cookies to keep you signed in and secure the Service, and limited analytics cookies to understand usage. Paddle may set cookies during checkout. You can control cookies through your browser settings; disabling necessary cookies may affect the Service.
11. Children
The Service is not directed to individuals under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app notice. The "Last updated" date above reflects the latest version.
13. Contact
For any privacy question or request, contact Noventa Solutions at support@noventasolutions.co.