Privacy notice

Who decides what happens to your data

For a company's records (its bills, vendors, customers and payments), the company decides, and Novago handles the data for it. If you are a company's vendor, customer or staff member, ask that company first; you can also write to us. For your own login and for our clients' accounts with us, Novago decides.

What we collect

• Your login: your name, email, how you sign in, the devices you get alerts on, and your settings.
• What companies enter: vendor and customer contacts, bills, receipts, and payment and bank details.
• What payers and buyers give us: their name, email, and what they bought or paid.
• A record of activity: who did what and when, with the IP address and device, so companies can check it.
• Sign-in records: when and how you signed in, the internet address with its rough place and network, and the device (browser and system, the model where it says, screen size, time zone and language, and a fingerprint made from these). They are used only to keep accounts safe, for example to spot a new device or country.

Why we use it

To run the service your company signed up for, to keep it secure (sign-in checks, the activity record, duplicate and fraud checks), and to meet the law, such as keeping financial records. We don't sell your data or use it for advertising.

AI

AI reads bills, receipts and emails only when your company turns it on, and only with the provider the company agreed to. A person still checks, approves and pays.

Who else gets it

Only the services listed below, and only what each needs. A company may also connect its own accounting, mailbox or AI service; then that company decides what the service gets.

How long we keep it

As long as your company uses Novago. Financial records stay as long as the law requires (5 years in Singapore, 7 in Malaysia). When someone leaves, their company can erase their personal details; the business records stay. Sign-in records are kept in full for 3 years, then only the country and network.

What you can ask for

To see a copy of your data, to correct it, to delete it, to stop its use for now, or to object to how it is used. Ask from Account, Your data, or write to the company or to us. We answer within the time your country's law sets.

Cookies

Only what is needed to keep you signed in, to recognise the device you sign in on (a random device id; we also read its screen size, time zone and language to spot a new device), and to remember your language and screen theme. No advertising or tracking cookies.