Privacy Policy

1. Who We Are

NovaFlows ("we", "us", "our") is an AI automation agency that builds revenue systems for HVAC companies. We operate the website at novaflows.org and all services offered through it.

If you have questions about this policy, contact us at: terrybssn008@gmail.com

2. Information We Collect

We collect information you voluntarily provide when you:

• Fill out a booking or contact form (name, email, phone number)
• Use our AI chat assistant (conversation content)
• Respond to our Facebook Lead Ads (name, email, phone, location)
• Submit a review or feedback

We also collect limited technical data automatically:

• Browser type and device information
• Pages visited and time spent (via Vercel Analytics)
• A device identifier stored in your browser (localStorage) to persist your chat session

3. How We Use Your Information

4. Third-Party Services We Use

We share data with the following trusted services only as needed to operate:

We work with a limited set of trusted service providers solely to operate our business (hosting, email delivery, scheduling, and analytics). We do not disclose which specific platforms we use, and we do not sell, rent, or expose your personal information to any third party for marketing or any other purpose. All providers are bound by strict data processing agreements.

5. Data Retention

• Booking records — retained for 12 months for business records
• Chat sessions — expire after 30 minutes of inactivity in your browser; summaries may be retained longer for service improvement
• Lead data — retained while you are an active prospect or client, deleted upon request
• Analytics data — aggregated and anonymised, retained indefinitely

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications at any time
• Withdraw consent for AI-assisted calls or outreach

To exercise any of these rights, email us at terrybssn008@gmail.com and we will respond within 5 business days.

7. Cookies & Local Storage

We do not use tracking cookies. We use localStorage in your browser to:

• Remember your chat session for 30 minutes
• Store an anonymous device identifier for session continuity

This data never leaves your device unless you actively submit a form or send a chat message.

8. AI Voice Calls

If you submit your phone number through our Facebook Lead Ad or website forms, you may receive an automated AI voice call from NovaFlows. By submitting your number, you consent to this contact.

• Calls are only made between 9 AM and 8 PM in your local timezone
• A maximum of 3 call attempts will be made
• You can opt out at any time by replying "Stop" or emailing us

9. Security

We take reasonable technical and organisational measures to protect your data, including:

• HTTPS encryption on all data in transit
• Row-level security on our database (Supabase)
• API keys stored as environment variables, never in client-side code
• Rate limiting on all public endpoints

10. Changes to This Policy

We may update this policy as our services evolve. When we do, we'll update the "Last updated" date at the top. Continued use of our services after changes constitutes acceptance of the updated policy.