Novo
Novo / Novo Work

Novo Work Privacy Policy

How Novo Work handles personal information, providers, sharing, and privacy requests.

Last updated: October 25, 2026

Effective date: October 25, 2026

Status: Prelaunch version.

Novo Industries, Inc. ("we" or "us") operates Novo Work (formerly Novo North). This policy explains how we handle personal information about visitors, members, meeting participants, and others whose information is used in Novo Work.

Organizations control their workspace content, which we process on their behalf. We are responsible for our own processing, including accounts, billing, security, and running Novo Work.

1. Information we collect

Information comes from you, workspace members, meeting participants, connected services, websites used in your work (including public sources), and the providers below.

  • Account information: name, email address, profile details, timezone, workspace membership, and sign-in details.
  • Billing information: subscription and payment details. Stripe processes payment cards; we do not store full card numbers.
  • Workspace content: tasks, messages, files, records, Apps and their submissions, Memory, Routines, repository material, and helper results. This can include personal or sensitive information, and photos or location you share when you allow an App to use your camera or location.
  • Meetings: live audio and video, invitations, participant details, transcripts, and recaps. We also transcribe uploaded audio and video files.
  • Calls with your helper: microphone audio and relevant conversation context. Work requests and helper replies are saved in conversation history.
  • Connections and saved credentials: data from services you connect, website logins, and API keys. Helper browsers process web pages, cookies, and sign-in state, which can be saved for later tasks.
  • Support communications: messages you send us.
  • Technical and usage information: device, browser, network, approximate location, app version, usage, and logs. If you use biometric confirmation in a native app, we receive the result, not biometric data.

2. How we use information

We use information to do the work you request, keep useful context, manage accounts and billing, provide support and service messages, prevent abuse, and secure and improve Novo Work.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use workspace content, including inputs, outputs, conversations, and files, to train AI models.

Where EU or UK data protection law applies, we rely on:

  • Contract: to perform our agreement with you or take steps you request before entering it, including account access, requested work, and billing.
  • Legitimate interests: to operate Novo Work for organizations and their members, secure accounts, provide support, and improve Novo Work. You may object to this processing.
  • Legal obligation: to keep required records and respond to lawful requests.
  • Consent: where the law requires it. You may withdraw it at any time by contacting us.

3. Service providers and other recipients

Service providers

We use providers for hosting and computing, database and file storage, sign-in, billing, AI and media processing, document text recognition, meetings and transcription, connections, email, and monitoring and analytics. Our shared subprocessor register identifies the providers and their purposes for Novo Work and Novo Agents, including those used by your helper. Provider retention and processing terms vary; not every task uses every provider.

AI processing is essential to Novo Work. During setup, you allow us to send your profile, messages, files, connected content and recordings to the AI services in that register as needed to provide the service. You can end your use of Novo Work by deleting your account in Profile; the retention and deletion terms below apply.

Meeting transcription uses LiveKit and the providers in its downstream subprocessor list.

Our Data Processing Addendum applies when incorporated into your customer agreement.

Independent third-party services

Google and Microsoft receive sign-in information when you choose those methods, subject to their identity-service terms.

Google Maps Platform receives addresses, searches, route stops and map views to provide maps and location answers in Apps and through your helper. Google acts as an independent controller under its Controller–Controller Data Protection Terms and Privacy Policy.

Customer-directed destinations

Work you request can send information to connected services, GitHub repositories, custom tools, and websites, which follow their own terms. Apps can also load content from third-party sites.

4. Sharing within Novo Work and other disclosures

Workspace membership does not give other members access to your task conversations. Members can share content, including through public links where supported. Online meeting notes are initially shared with the host and workspace members who attended; in-person notes stay private unless shared. The person arranging a meeting must tell participants about transcription.

We may also disclose information to professional advisers, to comply with law or valid legal requests, to protect people or legal rights, or in connection with a merger, acquisition, or sale of assets.

5. Gmail, Google Calendar, Outlook and Outlook Calendar

Connecting these services gives Novo Work your account's email address and, for Microsoft, your organization's identifier. Depending on what you connect, it accesses:

  • Gmail or Outlook: email, attachments, headers, sending addresses, and your signature, to show important mail, search and help with it, and send email at your request. Opening a conversation in Mail on your screen marks it read, including when your helper opens it for you. Your helper's own reads do not.
  • Google Calendar or Outlook Calendar: your calendars and events, including guests and replies, to show your calendar, make the changes you request, and find times to meet.

We keep these copies private to you:

  • Mail: the sender, subject, and preview of conversations shown as Important; text worth finding later; drafts and signature; people you write to; and senders you mark as important or not. Other email is not saved in Mail. Opened attachments are copied briefly unless you save them to Drive.
  • Calendar: events from 30 days ago to 180 days ahead, plus temporary copies of other events you read or change. While connected, workspace members can see when you are busy, never event details, to find times to meet.

Disconnecting a service removes its saved Mail or Calendar copies. These copies are also removed when you leave the workspace or delete your account. Disconnecting does not remove information already saved in conversation history, Drive, or Memory, including notes about your mail and writing style. Use the available deletion controls or contact us for help removing it. Disconnecting Outlook or Outlook Calendar leaves Microsoft's approval in place; you or your organization's admin can revoke access at Microsoft.

We encrypt Google and Microsoft user data in transit and at rest. Our providers in Section 3 process it only to provide these features. Apart from calendar availability, it is not shared with other members unless you share it. It is never sold, used for advertising, or used to develop, improve, or train AI or machine learning models.

Novo Work's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Cookies and analytics

We use cookies and similar storage for sign-in, preferences, security, and product analytics. PostHog receives page visits, product events, and account and workspace information for analytics and feature flags. We do not record session replays or use advertising cookies or pixels. We do not respond to browser Do Not Track signals. Blocking necessary cookies can prevent sign-in.

7. Retention and deletion

We keep information as needed to provide Novo Work, support recovery, protect security, resolve disputes, and meet legal obligations.

  • Workspace content is kept for your workspace's use. Trash, version history, and other retained copies can outlast deletion. Shared content can remain after you leave or delete your account.
  • Canceled workspaces have limited access to export supported files for 30 days after the subscription ends. We begin permanent deletion 90 days after it ends unless the workspace is reactivated.
  • Your account: you can delete your account in the app. We keep billing, security, and legal records as long as needed for those purposes.
  • Execution records, backups, logs, and provider-held data can remain after deletion for their applicable retention periods.

8. International processing

We are based in the United States. We and our providers process information in the United States and other countries. Our DPA sets out transfer terms for covered workspace content when incorporated into your customer agreement. Contact privacy@novoindustries.co for information about applicable transfer safeguards or a copy.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, restrict processing, and withdraw consent. You may also have the right to object to processing, including processing based on legitimate interests. California and other US state laws may give you similar rights.

In the terms of US state privacy laws, we collect identifiers, commercial information, internet activity, geolocation, audio and visual information, professional information, and sensitive information contained in content or saved logins, for the purposes and recipients described above.

Email privacy@novoindustries.co to make a request or appeal a decision. We may need to verify your identity or an authorized agent's authority. We respond within the time the law requires and will not discriminate against you for exercising your rights. For content an organization controls, we may refer your request to that organization. You may also complain to your data protection authority.

10. Children

Novo Work is for adults 18 or older and is not directed to children. If you believe a child has provided personal information directly to us, contact us.

11. Changes and contact

We will post updates here and notify you of material changes as required by law. Before we use personal information for a new purpose, we will tell you, and ask for consent where the law requires it.

Novo Industries, Inc.