NOVARIS Go Privacy Policy

This policy applies to NOVARIS Go, the platform NOVARIS SOLUTIONS (“NOVARIS”, “we”) provides to businesses to serve, sell and operate. NOVARIS SOLUTIONS is responsible for this policy. It is separate from the Privacy Policy for the NOVARIS public website.

1. About NOVARIS Go

NOVARIS Go is a tool for businesses. Businesses use it to talk with their own customers, book appointments, sell and organize their operations. A description of NOVARIS Go and its Google Calendar connection is available on the NOVARIS Go and Google Calendar page.

This policy explains what information NOVARIS Go handles, why, which providers are involved, how it is protected, how long it is kept and how to ask for it to be deleted.

2. Connected Third-Party Services

2.1 Google User Data

If the business connects its Google account, NOVARIS Go uses Google Calendar to book the business’s appointments without overlaps.

Permissions we request:

• see the availability of the calendars the account has access to (calendar.events.freebusy);
• see the list of calendars, so the business can choose which one to use (calendar.calendarlist.readonly);
• create, change and delete appointment events (calendar.events);
• see the email address of the connected account, only to show which account is connected (email).

We do not request full access to Google Calendar.

How we use them: NOVARIS Go checks the busy times on the chosen calendar so it does not book an appointment on top of another one. It does not read or store the title, description or attendees of any other event.

What we store: only the identifier of the events NOVARIS Go creates, the chosen calendar and the email address of the connected account.

What we write to the calendar: for each appointment, the service, the customer’s name and phone number, who will attend to them, the date and time, and the appointment notes.

NOVARIS uses Google Calendar access only for the purposes described in this section. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, use it for advertising, or share it with third parties other than the providers that help us run the service (section 4), always under these same rules. We do not use Google user data to train AI models.

The business can disconnect Google Calendar at any time from NOVARIS Go; when it does, we immediately delete the access permission. It can also remove access from its Google Account, under Security → Third-party apps with account access.

2.2 WhatsApp, Instagram, Facebook and Calls

When the business connects its channels, NOVARIS Go receives what its customers send so it can show it in the Inbox and reply:

• text messages, voice notes, photos and files;
• comments on the business’s posts;
• profile name or username and profile photo;
• phone number, on WhatsApp;
• on calls, the transcript of the conversation and, if the call is recorded, the audio recording.

This data is kept while the business has an active account, so it can see each customer’s history.

Recording notice. Every call the assistant answers starts with the notice “This call may be recorded to improve the quality of our service” (in Spanish, “Esta llamada puede ser grabada para mejorar la calidad de nuestro servicio”). The business cannot remove or change it. The audio recording is kept by the call provider (section 4). NOVARIS Go does not store the link to the audio: it requests it only when an authorized team member opens the call.

2.3 The Business’s Account and Team

To create and use the account, NOVARIS Go handles information about the people on the business’s team, such as their name and email address, and sends them invitation, password and notification emails.

2.4 Team Alerts on Telegram

Each team member can connect their own Telegram account to receive alerts. NOVARIS Go alerts them when a customer writes, when a customer asks to talk to a person, or when a conversation is assigned to them.

The alert only includes: the name the customer appears under, the channel (WhatsApp, Instagram or Facebook), an excerpt of up to 80 characters of the message, and a link to the conversation in NOVARIS Go, which requires signing in. It does not include photos, files or audio.

The team member can disconnect Telegram at any time from NOVARIS Go.

3. Artificial Intelligence

The NOVARIS Go assistant replies to the business’s customers using Anthropic models (Claude). Voice notes are turned into text, and text into speech, with OpenAI. The assistant’s voice is generated with ElevenLabs. Access to the models goes through Vercel AI Gateway.

Customer data is not used to train artificial intelligence. We use business services that do not train on the data sent to them. See also Responsible Artificial Intelligence.

Talk to your business. Team members with permission can ask an artificial intelligence assistant questions about their business, by text or by voice. The assistant can only read. It uses fixed queries run by the server, with no open access to the database, and each person only receives what their permissions allow. For security and usage limits, NOVARIS Go records who asked, when, the text of the question (up to 500 characters), which queries the assistant used and how it ended. It uses the same artificial intelligence providers listed in this section, under the same rules.

SKY, NOVARIS Go help. The business’s team can ask SKY, an artificial intelligence assistant, how to use the platform. If SKY cannot solve something, it creates a ticket for NOVARIS support.

4. Providers and Where Data Is Stored

NOVARIS Go’s servers are in the United States. These providers handle customer data to deliver the service:

• Vercel (United States): application hosting and access to artificial intelligence (Vercel AI Gateway).
• Supabase (United States): database and files. Each business has its own database, separate from the others.
• Zernio Software SL (Spain): connection with WhatsApp, Instagram and Facebook.
• Twilio (United States): phone calls.
• ElevenLabs (United States): the assistant’s voice.
• Anthropic (United States): the assistant’s artificial intelligence model.
• OpenAI (United States): voice notes to text and text to speech.
• Resend (United States): platform emails (invitations, passwords, notifications).
• Telegram FZ-LLC (United Arab Emirates, servers in several regions): only internal alerts to the business’s team, with a short excerpt of the message (section 2.4).
• Cloudflare, Inc. (United States): daily backups.
• Google: Google Calendar, only if the business connects it.

NOVARIS Go does not process card payments.

This list is also published on the Subprocessors page.

5. Storage and Security

• encrypted connections (HTTPS) and data encrypted at rest;
• a separate database for each business;
• the Google permission and other keys are stored encrypted and are never shown on screen;
• two-step verification with an authenticator app and backup codes;
• role-based permissions, checked on the server;
• a record of every time NOVARIS support accesses a business’s account;
• daily backups.

6. Retention and Deletion

• While the account is active: data is kept, and the business can delete customers and conversations from the platform.
• When Google Calendar is disconnected: the access permission is deleted immediately. It can also be removed from the Google Account (Security → Third-party apps with account access).
• When the account is cancelled: the business has 30 days to download its data. We notify it on the day it cancels, and again 15, 7 and 1 day before deletion. After those 30 days, the data is permanently deleted; from backups, within a further 30 days at most.

To ask for your data to be deleted, write to privacy@novarissolution.com. We reply within 30 days at most. If you are a customer of a business that uses NOVARIS Go, you can write to us at that address or ask the business, which can delete customers and conversations from the platform. The steps are summarized on How to Delete Your Data.

7. Minimum Age

NOVARIS Go is a tool for businesses. You must be at least 18 years old to use it.

8. Changes to This Policy

We may update this policy when NOVARIS Go, its connected services, or applicable requirements change. The version and effective date published at the top of this page identify the policy currently in effect. Current version: 1.1, effective October 17, 2026.

9. Contact

• Privacy and data deletion: privacy@novarissolution.com
• Security (report a security issue): security@novarissolution.com
• Legal: legal@novarissolution.com
• Platform support: support@novarissolution.com
• General inquiries: contact@novarissolution.com

You can also use our Contact page.