Novo NorthSign in

Privacy Policy

Effective date: October 10, 2026

Status: Prelaunch version.

Novo Industries, Inc. ("Novo," "we," or "us") operates Novo North and related services (the "Service"). This policy explains how we handle personal information about visitors, members, meeting participants, and others whose information is used in Novo North.

When an organization uses Novo North, it decides what its workspace contains, and we process that content on its behalf. Novo is responsible for its own processing, such as accounts, billing, security, and running the service.

1. Information we collect

Information comes from you, workspace members, meeting participants, connected services, websites used in your work, and the providers below.

  • Account information: name, email address, profile details, timezone, workspace membership, and sign-in details.
  • Billing information: subscription and payment details. Stripe processes payment cards; we do not store full card numbers.
  • Workspace content: tasks, messages, files, records, Apps, Memory, Workflows, repository material, and helper results. Content can include personal or sensitive information.
  • Meetings: audio and video, which we process in real time to create transcripts and recaps, plus invitations and participant details. Uploaded audio and video files are processed for transcription.
  • Calls with your helper: microphone audio and relevant conversation context used for voice conversations and requested work. Work requests and helper replies are retained as conversation records.
  • Connections and saved credentials: data from services you connect, website logins, and API keys. Helper browsers process web pages, cookies, and sign-in state, which can be saved for later tasks.
  • Support communications: messages you send us.
  • Technical and usage information: device, browser, network, app version, usage information, and logs. If you use biometric confirmation in a native app, we receive the result, not biometric data.

2. How we use information

We use information to provide Novo North and the work you request, keep useful context, manage subscriptions and usage, provide support and service messages, secure the service and prevent abuse, fix problems, and improve Novo North.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use workspace content, including inputs, outputs, conversations, and files, to train AI models.

Where EU or UK data protection law applies, we rely on:

  • Contract: to perform our agreement with you or take steps you request before entering it, including account access, requested work, and billing.
  • Legitimate interests: to operate Novo North for organizations and their members, secure accounts, provide support, and improve Novo North. You may object to this processing.
  • Legal obligation: to keep required records and respond to lawful requests.
  • Consent: where the law requires it. You may withdraw consent at any time.

3. Service providers and other recipients

Service providers

We use providers for hosting and computing, database and file storage, sign-in, billing, AI inference and media processing, document text recognition, meeting transport and transcription, connected services, email, and monitoring and analytics. Our shared subprocessor register, incorporated here, identifies the providers and their purposes for Novo North and Novo Agents. Not every task uses every provider.

The register includes the providers used by your helper. Meeting transcription uses LiveKit and the providers in its downstream subprocessor list.

AI processing uses the providers identified in the shared register. Provider retention and processing terms vary. Our Data Processing Addendum applies when incorporated into your customer agreement.

Independent third-party services

Google and Microsoft receive sign-in information when you choose those methods, subject to their identity-service terms.

Google Maps Platform receives addresses, searches, route stops and map views to provide maps and location answers in Apps and through your helper. Google acts as an independent controller under its Controller–Controller Data Protection Terms and Privacy Policy.

Customer-directed destinations

Work you request can send information to services you connect, including GitHub repositories, custom tools, and websites, which follow their own terms.

4. Sharing within Novo North and other disclosures

Your task conversations are not visible to other members through workspace membership. Members can share files, Apps, records, and Memory, and public links make content available outside the workspace. Online meeting notes are initially shared with the host and the workspace members who attended. In-person notes stay private unless shared. The person arranging a meeting is responsible for telling participants about transcription.

We may also disclose information to professional advisers, to comply with law or valid legal requests, to protect people or legal rights, or in connection with a merger, acquisition, or sale of assets.

5. Cookies and analytics

We use cookies and similar storage for sign-in, preferences, security, and product analytics. We do not use advertising cookies or pixels. After you sign in, PostHog session replay records how you use Novo North, configured to mask text and form inputs. We do not respond to browser Do Not Track signals. Blocking necessary cookies can prevent sign-in.

6. Retention and deletion

We keep information as needed to provide the Service, support recovery, protect security, resolve disputes, and meet legal obligations.

  • Workspace content is kept for your workspace's use. Trash, version history, and retained copies can outlast deletion. Content you shared with a workspace can remain after you leave or delete your account.
  • Canceled workspaces have limited access to export supported files for 30 days after the subscription ends. We begin permanent deletion 90 days after it ends unless the workspace is reactivated.
  • Your account: you can delete your account in the app. We keep billing, security, and legal records as long as needed for those purposes.
  • Execution records, backups, logs, and provider-held data can remain after deletion for their applicable retention periods.

7. International processing

Novo is based in the United States. We and our providers process information in the United States and other countries. Our DPA sets out transfer terms for covered workspace content when incorporated into your customer agreement. Contact privacy@novonorth.com for information about applicable transfer safeguards or a copy.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to restrict or object to processing, and to withdraw consent. California and other US state laws may give you similar rights. In the terms of those laws, we collect identifiers, commercial information, internet activity, audio and visual information, professional information, and sensitive information contained in content or saved logins, for the purposes and recipients described above.

Email privacy@novonorth.com to make a request or appeal a decision. We may need to verify your identity or an authorized agent's authority. We respond within the time the law requires and will not discriminate against you for exercising your rights. For content an organization controls, we may refer your request to that organization. You may also complain to your data protection authority.

9. Children

Novo North is for adults 18 or older and is not directed to children. If you believe a child has provided personal information directly to us, contact us.

10. Changes and contact

We will post updates here and notify you of material changes as required by law. Before we use personal information for a new purpose, we will tell you, and ask for consent where the law requires it.

Novo Industries, Inc.