Privacy Policy

1. Who We Are

Nuvio One is a SaaS (Software as a Service) business management platform operated by Nuvio Technologies LLC, a company registered in Illinois, USA.

Registered address: 800 Roosevelt Rd, Glen Ellyn, IL 60137, United States

Product: Nuvio One — available at nuvione.com and app.nuvione.com

In this Privacy Policy, "Nuvio One", "we", "us", or "our" refers to Nuvio Technologies LLC. "You" refers to users of our platform — either as a business account holder or as an end customer accessing a business's client portal.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Name, email address, company name, and password when you register a business account
• Contact records: Names, email addresses, phone numbers, and other details of your customers that you enter into the platform
• Billing information: Payment card details processed securely through Stripe — we never store card numbers directly
• Communications: Messages, notes, and files you upload or create within the platform
• Support requests: Information you provide when contacting our support team

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, actions taken within the platform, and timestamps
• Device and browser information: IP address, browser type, operating system, and screen resolution
• Log data: Server logs including error reports and performance data
• Cookies and similar technologies: Session cookies required for authentication and functionality (see Section 9)

2.3 Information from Third-Party Integrations

When you connect third-party services to Nuvio One (such as Google Calendar or Gmail), we receive data from those services as described in Section 3 below. You control which integrations are connected and can disconnect them at any time from your account settings.

3. Google API & OAuth Scopes

3.1 Why We Request Google Permissions

Nuvio One optionally integrates with Google Calendar and Gmail to help businesses manage their customer relationships more effectively. These integrations are entirely optional — the platform works without them. You can connect or disconnect Google integrations at any time from Settings → Integrations.

3.2 Scopes Requested and Why

3.3 How We Use Google Data — Limited Use

We strictly limit our use of data obtained through Google APIs:

• Google Calendar data is used only to calculate your availability and create/update calendar events relating to bookings made through Nuvio One
• Gmail data is used only to display email threads within a customer's contact record and to send emails on your behalf when you initiate them
• We do not use Google user data to serve advertisements
• We do not sell Google user data to any third party
• We do not allow humans to read your Google data except: (a) with your explicit consent; (b) for security investigations; (c) to comply with applicable law
• We do not use Google data to train AI or machine learning models
• We do not transfer Google user data to third parties except to sub-processors that are necessary to provide the service (listed in Section 5)

3.4 Revoking Google Access

You can disconnect your Google account from Nuvio One at any time in Settings → Integrations → Google. You can also revoke Nuvio One's access directly from your Google Account permissions page. Upon disconnection, we delete your stored Google OAuth tokens within 24 hours.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Nuvio One platform
• Process transactions and manage your subscription billing
• Send transactional emails — booking confirmations, invoice notifications, password resets, and system alerts
• Sync your connected Google Calendar and Gmail data as described in Section 3
• Provide customer support when you contact us
• Monitor platform performance, diagnose bugs, and improve the service
• Comply with legal obligations
• Detect and prevent fraud, abuse, and security incidents

We do not use your data or your customers' data for advertising purposes. We do not sell data to third parties.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only with trusted sub-processors required to operate the platform:

We may also disclose your information if required to do so by law, court order, or government authority, or to protect the rights, property, or safety of Nuvio Technologies LLC, our users, or the public.

6. Data Retention

• Active accounts: We retain your data for as long as your account is active
• After cancellation: Your data is retained for 30 days after account cancellation, during which you can export it. After 30 days, it is permanently deleted from our systems
• Google OAuth tokens: Deleted within 24 hours of disconnecting the Google integration
• Billing records: Retained for 7 years as required by US financial regulations
• Support communications: Retained for 2 years

You can export all your data (contacts, tickets, invoices, KB articles, files) at any time from Settings → Export. The export is available in CSV, JSON, and PDF formats.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

7.1 All Users

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention obligations)
• Export: Download all your data in a portable format at any time from your account settings
• Disconnection: Revoke any third-party integration (Google, etc.) at any time

7.2 EU / UK Residents (GDPR)

If you are located in the European Union or United Kingdom, you additionally have the right to object to processing, restrict processing, and lodge a complaint with your local data protection authority. Our legal basis for processing is contract performance (to provide the service you signed up for) and legitimate interests (platform security and improvement).

7.3 California Residents (CCPA / CPRA)

California residents have the right to know what personal information is collected, to delete personal information, to opt out of the sale of personal information (we do not sell personal information), and to non-discrimination for exercising these rights.

To exercise any of your rights, contact us at [email protected]. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your personal information:

• All data in transit is encrypted using TLS 1.2 or higher
• All data at rest is encrypted using AES-256
• Google OAuth tokens and API credentials are stored encrypted and are never exposed in logs
• Access to production systems is restricted to authorised personnel only, with multi-factor authentication required
• We conduct regular security reviews and penetration testing
• Payment card data is never stored on our servers — all payments are processed by Stripe

No method of transmission over the internet or electronic storage is 100% secure. If you become aware of any security vulnerability or breach, please notify us immediately at [email protected].

9. Cookies

Nuvio One uses the following types of cookies:

• Essential cookies: Required for authentication and maintaining your login session. These cannot be disabled without preventing you from using the platform.
• Functional cookies: Remember your preferences (language, timezone, display settings)
• Analytics cookies: Help us understand how the platform is used so we can improve it. These are anonymised and do not track you across other websites.

Our marketing website (nuvione.com) uses minimal cookies. The application (app.nuvione.com) uses session cookies required for security and authentication. We do not use advertising cookies or third-party tracking cookies.

10. Children's Privacy

Nuvio One is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it promptly.

11. Third-Party Links

Our platform and website may contain links to third-party websites and services. This Privacy Policy applies only to Nuvio One. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) and/or by displaying a prominent notice on the platform at least 14 days before the changes take effect.

The "Last updated" date at the top of this page reflects when the policy was last revised. Your continued use of Nuvio One after changes take effect constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact us:

We aim to respond to all privacy-related requests within 30 days. For urgent security matters, we aim to respond within 48 hours.