Your data, plainly.

Last updated: October 5, 2026

1. Who we are

"Novantu", "we" and "us" mean NOVANTU, the provider of the Novantu website at novantu.app and the Novantu web application. Novantu is currently being formalized as a registered business; once that is complete, this policy carries over to the registered entity. For anything about your personal information, write to novantuinfo@novantu.app.

This policy covers three places: our website, the checkout where you subscribe, and the Novantu app — including the links you send from it, which let a subcontractor submit a bid, a general contractor view and print your estimate, or your crew send a daily log.

2. What we collect

When you visit the website. We don't run analytics, advertising pixels or tracking cookies on the website, and it has no forms that send data to us. Like any website, the services that deliver our pages and fonts receive technical information your browser sends automatically, such as your IP address, browser type and the page requested. If you email us — for example to request a trial, a demo or a set-up quote — we receive what you write and your email address.

When you subscribe. Payments are handled by Stripe on its own secure page. Stripe collects your email address, name, phone number, the company name you enter, a billing address when needed, and your payment details. We can see your name, email, phone, company name, plan and payment status in our Stripe account, so we can set up your workspace and bill your plan. We never receive or store your card number. After paying, you email us your payment reference so we can match your payment to your company.

When you use the app.

• Account information: your email address and password (stored hashed by our authentication provider), your name, your role, and the company workspace you belong to. Our authentication provider also keeps standard sign-in records, such as IP address and browser.
• Workspace content you add: projects, estimates, price books, proposals, schedules, logs and notes; your company's name, logo and colors; contact details of the subcontractors, general contractors, suppliers and clients you work with; and files you upload, such as plan sets, documents, bid PDFs and photos.
• Emails you send from the app: the recipient and subject of each one are kept in your workspace's send history — and, for bid invitations, the text that was sent.
• Estimates you share by link: a copy of the estimate as your client sees it — never your costs or markup — is stored so the link can show it and let them print it.
• What people send back through your links: a subcontractor's bid or no-bid, their bid PDF and messages; a general contractor's reply on an older estimate link (for example awarded or lost) and messages; your crew's daily logs — name, notes, hours, crew size, weather and up to three photos. When someone opens an estimate link you sent, we record when it was last opened.
• Presence: while you're signed in, other members of your workspace can see your name and which screen you're on. This isn't stored.
• Usage records: how many AI requests each user makes (to apply plan limits), basic technical details of each AI request (such as its type, size, duration and any error) to keep the features working, and error information needed to fix problems.

3. How we use it

• To provide the service: run your workspace, generate estimates and proposals, deliver the links you send, and send the emails you ask the app to send.
• To bill your subscription and answer billing questions.
• To support you and, if you order the personalized set-up, to configure your workspace for you.
• To keep the service secure, prevent abuse and fix problems.
• To tell you about important changes to the service or these terms.

We don't sell your personal information, we don't share it for advertising, and we don't share your workspace data with other customers.

4. AI features

When you use an AI feature — asking a question, drafting an estimate from a written breakdown, reading plan sheets, leveling the bids you received, or researching prices — we send the content needed for that request to our AI provider, Anthropic, which processes it to return the answer. Depending on the feature, that can include the text you type, the project and price data involved, images of the plan pages you attached, the bid PDFs being compared, or the daily logs being summarized. Plan pages are only sent when you attach them to that request or press a plan-reading button. When the AI researches current prices, it runs web searches about materials and prices, not about you.

Anthropic processes this data under its commercial terms, which don't allow it to use our requests to train its models. AI answers are drafts for you to review: when the assistant proposes changes to your estimates or project data, it shows them to you first and applies them only when you approve.

5. Google (Gmail) data

Connecting Gmail is optional. It lets the app send bid invitations, follow-ups and estimates from your own Gmail address. When you connect, we request only two permissions: send email on your behalf (gmail.send) and see your email address (userinfo.email). We store your Gmail address and a Google refresh token on our servers, where your browser never sees it, and use them only to send the emails you ask the app to send. We do not read, store or scan your inbox, your messages or your contacts.

You can disconnect at any time from Settings → Email, which deletes the token we store. To also remove Novantu from the list of apps connected to your Google Account, revoke it at myaccount.google.com/permissions.

Novantu's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, we don't sell it, we don't send it to our AI provider, and we don't use it to train AI models.

6. People you work with

When you add contacts, invite subcontractors, send an estimate or give your crew a daily-log link, you decide what information goes into your workspace, and we process it on your behalf to provide the service. Please only add people's details and send them emails when you have the right to. If one of them wants their information removed, they can ask your company, or write to us.

7. Who processes data for us

We use a small number of service providers, each only for the job described:

• Stripe — payments, subscriptions and receipts. Stripe sets its own cookies on its checkout page, for example to prevent fraud; see Stripe's privacy policy.
• Supabase — our database, file storage, sign-in (including password-reset emails) and the server functions that run the app.
• Anthropic — processing AI requests (section 4).
• Google — sending the emails you ask for through your connected Gmail (section 5), and serving the fonts our pages use.
• GitHub Pages — hosting our website and the app's pages.
• Public code-delivery networks (jsDelivr, cdnjs, unpkg) — serving the standard open-source code libraries the app loads.
• Your browser's speech service — if a crew member dictates a daily log instead of typing it, the browser's built-in speech recognition turns the audio into text; in Chrome and Edge that audio is processed by Google or Microsoft.
• Our email provider — receiving the messages you send to our inbox.

These providers may process data in the United States and other countries where they operate. We may also disclose information if the law requires it, or to protect the rights and safety of our users or of Novantu.

8. Your browser

The website sets no cookies and stores nothing in your browser. The app keeps your sign-in session, your preferences and a working copy of your workspace in your browser's local storage, so it loads quickly and doesn't lose edits if your connection drops. It also keeps recent version snapshots and a cache of the plan PDFs you've opened. Signing out removes the working copy of your workspace; the snapshots and cached PDFs stay on that device until you clear the site's data in your browser — worth doing on a shared computer. Photos your crew uploads are re-saved by the app before upload, which removes hidden location data.

9. How long we keep it

We keep your account and workspace data while your subscription is active. If you cancel, we keep it so we can send it to you when you ask, until you ask us to delete it. There's no automatic deletion schedule today. Deletion is done by our team on request: email novantuinfo@novantu.app and we'll delete your account, your workspace and its files, and confirm by email. Deleting a project inside the app removes it from your workspace, but some stored files — such as plan sets, received bid PDFs and photos — are only fully removed when we process a deletion request. Stripe keeps payment records for as long as the law requires, and our providers keep their own logs and backups under their own schedules.

10. Your choices and rights

• Ask for a copy of your personal information, or ask us to correct or delete it — write to novantuinfo@novantu.app.
• Export your estimates as PDF or CSV, and your workspace as a JSON backup, from the app.
• Disconnect Gmail at any time (section 5).

We'll answer within a reasonable time and won't treat you differently for making a request. Depending on where you live, you may have additional rights under local law; write to us and we'll help.

11. Who can see your workspace, and security

Your workspace records are available to the members of your workspace. Novantu's team can also access workspace data when we need to — to set up your workspace, give you support, or keep the service running — and only for those reasons. Uploaded files are kept in private storage that isn't publicly accessible.

Data travels encrypted (HTTPS), passwords are stored hashed, your Gmail token stays on our servers, and payment details stay with Stripe. No system is perfectly secure; if an incident affects your information, we'll notify you as the law requires.

12. Children

Novantu is a tool for businesses. It isn't directed to children, and we don't knowingly collect information from anyone under 16.

13. Changes

If we change this policy, we'll update the date at the top, and for significant changes we'll notify account owners by email.