Legal
Novéalla is designed to protect the information entrusted to your AI Executive Headquarters.
Effective date: August 21, 2026
This Privacy Policy explains how Novéalla Inc. ("Novéalla," "we," "us," or "our") collects, uses, discloses, stores, processes, protects, retains, and otherwise manages personal information when you access or use Novéalla, visit our websites, create an account, start a trial, purchase or manage a subscription, communicate with us, use an AI Executive Headquarters or Business Workspace, connect integrations, or otherwise interact with our services (collectively, the "Service").
This Policy is intended to describe our practices under applicable Canadian private-sector privacy laws, including the Personal Information Protection and Electronic Documents Act ("PIPEDA") where applicable, together with applicable provincial privacy legislation.
Where mandatory privacy law provides greater protection than this Policy, the mandatory law prevails to the extent of the conflict.
Novéalla is responsible for personal information under its control. We maintain privacy practices intended to support lawful collection, use, disclosure, retention, protection, access, correction, complaint handling, and incident response.
Responsibility for Novéalla's privacy program is assigned to our Privacy Officer or an authorized delegate acting under that responsibility.
Privacy Officer — Novéalla Inc.
Email: novealla@outlook.com
This Policy applies to personal information under Novéalla's control that is collected through or in connection with the Service.
It does not govern independent third-party websites, applications, payment services, social networks, ecommerce systems, or other services that maintain their own privacy practices, except to the extent Novéalla remains legally accountable for information processed by a service provider on our behalf.
Personal information generally means information about an identifiable individual, subject to the definition contained in applicable privacy law.
Information concerning a business does not always constitute personal information. Business information may nevertheless be personal information where it identifies, relates to, or can reasonably be associated with an identifiable individual.
The information collected depends on how you use Novéalla and the features you choose.
We may collect information:
Novéalla seeks to identify the purposes for collecting, using, or disclosing personal information before or at the time of collection, or as otherwise permitted by applicable law.
We do not intend to collect personal information without a reasonable business, contractual, security, legal, operational, or Service-related purpose.
Information may be used to:
Where consent is required, we seek consent appropriate to the sensitivity of the information, the purposes involved, reasonable expectations, and the circumstances.
Consent may be express or implied where applicable law permits.
More sensitive, unexpected, or materially different processing may require express consent.
Some information and processing are necessary to provide authentication, account security, subscriptions, Business Workspaces, or functionality you specifically request.
Where processing is based on consent, you may withdraw that consent subject to applicable legal or contractual restrictions and reasonable notice.
Withdrawal does not affect processing that lawfully occurred before withdrawal.
If information is necessary to provide a requested feature, withdrawing consent may prevent Novéalla from continuing to provide that feature or Service.
Contact novealla@outlook.com regarding withdrawal of consent.
We seek to limit collection to information reasonably necessary for identified purposes.
Users should avoid providing unnecessary personal information, particularly sensitive personal information, in AI prompts, uploads, or Business Workspaces.
Novéalla uses artificial-intelligence technologies to provide executive assistance, analysis, business intelligence, content generation, creative review, image generation, and other AI-enabled functionality.
Depending on the feature used, prompts, instructions, business context, text, images, or other Customer Content may be transmitted to an AI service provider for processing.
Novéalla currently uses OpenAI technology for certain AI functionality.
Users should submit only information reasonably necessary for the requested task and should avoid intentionally supplying sensitive personal information unless its use is lawful, necessary, and appropriate.
Novéalla is designed as a business decision-support platform and not as an autonomous system for making final decisions concerning an identifiable person's legal rights, employment, credit, insurance, healthcare, housing, or similarly significant interests.
Our Terms of Service restrict use of AI Outputs as the sole basis for certain high-impact decisions.
Novéalla is designed as a multi-tenant platform for independent founders and businesses.
Business Workspaces are associated with authenticated founder and business identifiers.
Tenant-scoped information is designed to remain separated from information belonging to other independent customers.
Novéalla uses tenant-aware access controls and database security policies, including Row Level Security in applicable production database tables, intended to restrict access to authorized workspace information.
Novéalla uses authentication and session mechanisms to protect Accounts, identify authenticated founders, maintain authorized workspace context, and identify the active Business Workspace.
Authentication information may be managed using Supabase authentication services and associated secure session mechanisms.
Logging out may invalidate or remove session and active-workspace information used by the Service.
Novéalla uses cookies and similar technologies where necessary for authentication, session management, active-business selection, account protection, security, and related Service functionality.
Essential authentication and session technologies may be necessary for the Service to function correctly.
If Novéalla introduces non-essential analytics, advertising, or similar technologies for which applicable law requires consent, we will provide appropriate notice or choice.
Certain Novéalla features use browser local storage or session storage to maintain limited application state, such as profile completion, workspace state, executive-review state, founder mission state, navigation preferences, or other interface information.
Browser storage is controlled by the browser on your device. Clearing browser data may remove locally stored state without deleting records maintained in Novéalla's server-side systems.
Novéalla uses Supabase for production authentication, database services, and related infrastructure.
Depending on the feature used, Supabase may process founder, business, workspace, subscription, Business Memory, onboarding-memory, executive-memory, and related platform information on Novéalla's behalf.
Novéalla remains accountable for personal information under its control to the extent required by applicable law.
Novéalla uses Stripe to process subscription payments and related billing functions.
Stripe may process payment-card information, billing information, transaction information, customer identifiers, subscription identifiers, fraud-prevention information, and other information required to provide payment services.
Novéalla receives information needed to administer subscriptions but does not store full payment-card numbers.
Novéalla may use service providers for functions including:
Service providers receive information only as reasonably necessary to perform their services or provide functionality requested by you, subject to applicable agreements, safeguards, and law.
Novéalla is a Canadian business. Some service providers, infrastructure, or supporting systems may nevertheless process or store information outside your province or outside Canada, including in the United States or other jurisdictions.
Information processed in another jurisdiction may be subject to the laws of that jurisdiction, including lawful access by courts, regulatory authorities, law-enforcement bodies, or other governmental authorities.
Where required by applicable law, Novéalla takes reasonable steps to assess and manage risks associated with service providers and cross-border processing.
If you intentionally connect a third-party service to Novéalla, information may be exchanged between Novéalla and that service to provide the requested functionality.
The information exchanged depends on the integration, permissions granted, and functionality requested.
Independent services are also governed by their own privacy policies and contractual terms.
Novéalla may disclose personal information without consent where applicable law permits or requires that disclosure.
This may include disclosure:
Personal information may be disclosed or transferred in connection with a proposed or completed financing, merger, acquisition, reorganization, restructuring, insolvency process, sale of assets, or other corporate transaction where permitted by applicable law.
Confidentiality and privacy protections will be used where required.
Novéalla does not sell personal information for monetary consideration.
We do not disclose Customer Content to unrelated third parties for their own independent marketing purposes unless separately disclosed and authorized where required by law.
We seek to maintain personal information with a level of accuracy appropriate to the purposes for which it is used.
You are responsible for providing accurate account and business information and updating it where appropriate.
Novéalla retains personal information only for as long as reasonably necessary for the purposes for which it was collected or for other lawful purposes.
Retention periods may vary based on the nature and sensitivity of the information, account status, subscription status, workspace requirements, fraud-prevention requirements, security needs, technical backup practices, dispute requirements, and legal, regulatory, tax, or accounting obligations.
Some information may remain in backups, archives, billing records, security records, legal records, transaction records, or other systems for a period after active use ends where reasonably necessary or legally required.
You may request closure of your Account or deletion of eligible personal information by contacting our Privacy Officer.
Novéalla does not promise instantaneous deletion of every record following a request.
A closure or deletion request may require identity verification and may be subject to lawful exceptions, technical limitations, billing and transaction-record obligations, contractual requirements, security requirements, backup practices, fraud-prevention needs, accounting or tax obligations, dispute preservation, and other legitimate retention requirements.
Where information is eligible for deletion and no lawful reason requires continued retention, we will take reasonable steps to delete, destroy, anonymize, or otherwise dispose of it in accordance with applicable law and operational procedures.
Novéalla uses administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, use, disclosure, alteration, loss, theft, or destruction.
Safeguards may include authentication controls, tenant-aware access controls, Row Level Security policies, restricted administrative access, secure communications, session controls, provider security measures, monitoring, and operational recovery practices where applicable.
No internet-connected service can guarantee absolute security.
You are responsible for protecting your login credentials, devices, networks, email accounts, connected services, and systems under your control.
Notify Novéalla promptly if you reasonably believe your Account, credentials, or Business Workspace has been compromised.
Novéalla maintains processes intended to identify, investigate, contain, document, and respond to privacy, confidentiality, and security incidents involving personal information.
If an incident occurs, we may take measures to reduce the risk of harm, investigate the event, address affected systems, preserve evidence, and reduce the risk of recurrence.
Where applicable law requires notification or reporting because an incident creates the legally applicable threshold of risk or harm, Novéalla will notify affected individuals, privacy regulators, or other authorities as required.
We may also notify another organization or person where permitted by law and reasonably necessary to reduce the risk of harm.
Novéalla will maintain records of privacy or confidentiality incidents where applicable law requires those records.
Subject to applicable law and permitted exceptions, you may request access to personal information under Novéalla's control concerning you.
We may require sufficient information to identify responsive records and verify your identity.
Information may be withheld or redacted where permitted or required by law, including where disclosure would reveal another individual's personal information, privileged information, confidential commercial information, or security-sensitive information.
You may ask us to correct personal information you believe is inaccurate or incomplete.
Where appropriate and required by applicable law, we will correct or annotate eligible information.
Privacy requests concerning access, correction, deletion, withdrawal of consent, portability where applicable, or other statutory privacy rights should be directed to our Privacy Officer.
We may request reasonable identity verification before fulfilling a privacy request.
Requests will be handled within periods required by applicable law, subject to lawful extensions and exceptions.
If you have a concern about Novéalla's handling of personal information, contact our Privacy Officer so that we can investigate and respond.
Nothing in this Policy prevents you from contacting an applicable privacy regulator where you have the legal right to do so.
Where PIPEDA applies, individuals may have rights to raise privacy concerns with the Office of the Privacy Commissioner of Canada in accordance with applicable law.
Where Québec private-sector privacy legislation applies, Novéalla will comply with applicable requirements concerning collection, use, communication, protection, retention, destruction, governance, and handling of personal information.
The title and contact information of Novéalla's Privacy Officer are published in this Policy.
Where Québec law applies and statutory conditions are satisfied, individuals may have rights relating to access, correction, withdrawal of consent, and portability of certain computerized personal information collected from them.
These rights remain subject to statutory conditions, identity verification, technical requirements, and lawful exceptions.
Where Québec law applies, Novéalla will assess confidentiality incidents and take reasonable measures intended to reduce the risk of harm and prevent recurrence.
Where the applicable legal threshold of serious harm is met, Novéalla will provide required notice to affected individuals and the Commission d'accès à l'information du Québec.
Novéalla will maintain a confidentiality-incident register where required by Québec law.
Novéalla is a business platform intended for adults. It is not designed as a service for children.
Account holders must satisfy eligibility requirements contained in our Terms of Service.
If you believe a child has provided personal information contrary to these requirements, contact our Privacy Officer.
If you provide personal information concerning customers, employees, contractors, leads, partners, suppliers, or other persons, you are responsible for ensuring you have lawful authority to collect, use, and disclose that information to Novéalla for the requested purpose.
Novéalla is not designed as a general repository for highly sensitive personal records such as medical files, government identification numbers, banking credentials, passwords, private authentication secrets, biometric identifiers, or similar highly sensitive information.
Do not provide sensitive personal information unless it is reasonably necessary for an authorized feature, appropriate safeguards exist, and you have lawful authority to provide it.
Novéalla may send commercial electronic communications where permitted by applicable law and where any required consent has been obtained.
Promotional communications will include applicable sender-identification and unsubscribe information where required.
Unsubscribing from promotional messages does not prevent Novéalla from sending necessary transactional, authentication, security, billing, legal, subscription, or account communications.
Novéalla may process technical, diagnostic, operational, or usage information to protect the Service, identify errors, understand reliability, and improve product quality.
If additional non-essential analytics technologies are introduced that legally require consent or additional disclosure, we will provide appropriate notice or controls.
Do not submit passwords, secret API keys, private authentication tokens, full payment-card numbers, banking credentials, or government authentication credentials through AI prompts or ordinary Business Workspace requests.
If a sensitive credential is accidentally exposed, you should promptly rotate, revoke, or otherwise secure that credential and contact Novéalla where appropriate.
Novéalla may link to third-party websites or applications. Independent third parties control their own privacy practices.
Review applicable third-party privacy policies before submitting information directly to those services.
Novéalla may add, replace, or change service providers as technology and business operations evolve.
If a provider change creates a material privacy change for which applicable law requires notice or consent, we will take the steps required by that law.
We may update this Policy to reflect changes in law, technology, security, providers, business operations, or the Service.
Where required by applicable law, we will provide appropriate notice of material changes and obtain new consent where legally required.
The effective date at the top identifies the current version.
Privacy questions, complaints, access requests, correction requests, deletion requests, consent questions, portability requests where applicable, and other privacy inquiries may be directed to:
Privacy Officer — Novéalla Inc.
Email: novealla@outlook.com
General inquiries may also be submitted through our Contact page.
Novéalla™ is a trademark of Novéalla Inc. All rights reserved.
Last updated: June 2026 · Questions? Contact us