Privacy Policy

Last updated: August 3, 2026

Overview

This Privacy Policy explains how Novbe collects, uses, shares, stores, retains, and deletes personal data when people use Novbe websites, web applications, mobile applications, and related services (collectively, the “Services”).

Novbe provides online booking, customer management, reminders, finance visibility, and operational tools for service businesses. Novbe is the customer-facing brand operated by HACIYEV MURAD ƏZİZ OĞLU, an individual entrepreneur registered in Azerbaijan under taxpayer identification number (VÖEN) 2905372972. This operator is responsible for the personal data described in this policy.

If you have questions about this policy or want to make a privacy request, contact us at support@novbe.az.

Information We Collect

We collect information from people who create or use a Novbe account, from businesses that use Novbe to manage their operations, from customers who interact with participating businesses, from authentication providers when a user chooses to use them, and automatically when needed to operate and secure the Services.

Information provided by users and businesses

We may collect information that users or participating businesses provide when they create an account, log in, use Novbe, contact support, request a callback, upload a profile image, or manage bookings and business records. This may include:

Name
Email address
Phone number, if provided
Account and profile details
Profile or team-member photos that a user chooses to upload
Business identity, contact, location, timezone, and service information
Staff profiles, roles, permissions, schedules, time off, service assignments, location assignments, and compensation settings
Client profiles, contact details, notes, appointment and purchase history, and team-member assignments
Booking details, services, appointment times, status, notes, and related operational records
Transaction records such as prices, discounts, payment status or method, checkout details, retail items, and inventory consumption; Novbe does not collect a payment-card number through the mobile app unless a separate payment flow expressly says otherwise
Messages, support requests, and other communications sent to us

Mobile device permissions and media

The Novbe mobile app may request access to the camera or photo library so an authorized user can take or choose a profile or team-member photo. Access occurs only after the user initiates the feature and grants the device permission. Novbe receives the image the user selects or captures; it does not receive the user’s entire photo library. Users can deny or later revoke these permissions in device settings, although photo-upload features may then be unavailable.

Technical and service information

We may collect technical and service information needed to authenticate users, keep Novbe secure, diagnose errors, prevent misuse, and maintain reliable operation. Depending on how a person accesses the Services, this may include IP address, device or browser type, operating-system information, app version, language, login and session events, security events, request logs, error information, and feature-usage information.

Novbe does not use mobile camera or photo-library access for advertising or tracking.

Novbe may allow users to log in with Facebook Login. When a user chooses Facebook Login, Novbe may receive the following information from Meta:

Name
Email address
Public profile information

We use this Facebook Login data to authenticate the user, create or connect the user’s Novbe account, identify the user’s profile, provide customer support, protect account security, and operate the Novbe service.

Novbe does not sell Facebook Login data. Novbe does not use Facebook Login data for unrelated advertising purposes. Novbe does not request more Facebook data than needed for authentication and account access.

Facebook Login is optional where offered. A user may revoke Novbe’s Facebook permissions through Facebook settings. Revoking permission prevents future access through Facebook but does not by itself delete information already stored by Novbe; the user must also use the deletion methods described below.

How We Use Personal Data

We use personal data to:

Provide, maintain, and improve Novbe
Create accounts and allow users to log in
Set up and administer businesses, locations, services, team access, and permissions
Manage bookings, clients, staff, schedules, time off, checkout, inventory consumption, reminders, and business records
Display appointments and reports using the configured business timezone
Process profile or team-member photos selected by authorized users
Send account, booking, reminder, support, and service-related communications
Respond to support requests and user questions
Protect Novbe, users, and businesses from misuse, fraud, or unauthorized access
Analyze service performance and improve reliability
Comply with legal, tax, accounting, security, and regulatory obligations

We may share personal data with contracted service providers only when needed to operate, secure, host, support, communicate about, analyze, or improve Novbe. Depending on the features in use, these providers may supply cloud infrastructure, email or messaging delivery, social login, media storage, analytics, error monitoring, security, or customer-support services. They are expected to process data only for the contracted service, protect it appropriately, and retain it only as permitted by their agreement and applicable law.

Participating businesses and their authorized team members can access the client, booking, staff, and operational information made available to them according to their roles and permissions. Businesses are responsible for the information they enter into Novbe and for ensuring that they have authority to use it.

We may also share information if required by law, legal process, government request, security investigation, protection of rights, or business transfer such as a merger, acquisition, or sale of assets.

We do not sell personal data or Facebook Login data.

Data Retention

We keep personal data while an account is active or while the information is needed to provide Novbe. We may keep some information longer if required for legal, tax, accounting, security, fraud prevention, dispute resolution, or backup purposes.

An account-deletion request disables access immediately and begins a 30-day Recovery Period. During that period, the user can complete the identity-verified restoration process. If the account is not restored, Novbe removes or minimizes account credentials, direct contact information, social-login links, personal profile information, and personal media when the Recovery Period ends.

Businesses may continue to retain booking, finance, payment, compensation, inventory, stocktake, and audit history needed to operate, account for transactions, resolve disputes, prevent fraud, or meet legal obligations. Normal product views replace the deleted person’s profile with a stable non-identifying label. The retained identifiers and operational history may still be pseudonymous personal data when other context could identify the person; we do not treat pseudonymous data as necessarily anonymous.

Identity that must be retained for a documented legal, tax, employment, security, fraud-prevention, or dispute purpose is kept under restricted access for the approved retention period. Backups are not normal product data sources and must expire under the approved backup policy; completed deletions must be reapplied before a restored backup can serve live traffic.

When personal data is no longer needed for an approved purpose, we delete it, irreversibly anonymize it where possible, or keep only the minimum restricted record required by law.

Account Deletion

Users can start deletion from Account settings in the Novbe business web or mobile application. A person who cannot access or has uninstalled the application can use the public Novbe account-deletion page. The public flow verifies identity and does not require an authenticated application session.

Deletion applies to the global Novbe User account. If the user is the only active owner of a Business, the user must transfer ownership to an eligible active Team Member or close that Business before submitting the request. Existing Business history is preserved as described above. Finalized deletion cannot be restored; later registration with the same contact information creates a separate account and does not inherit the deleted account’s memberships or history.

We use contracted infrastructure, email, messaging, social-login, media-storage, analytics, and security providers where applicable. We delete or minimize local processor payloads. Where an approved provider erasure capability is configured, we send the erasure or minimization request required by the provider and retention contract; a required provider without that capability blocks release of the deletion feature. Some processors may retain narrowly required security, fraud-prevention, billing, or legal records under their own documented obligations.

Security

We use reasonable technical and organizational safeguards to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No online service can guarantee complete security, but we work to protect user data and improve our safeguards over time.

User Rights and Choices

Depending on location and applicable law, users may have the right to:

Request access to personal data
Correct inaccurate personal data
Delete personal data
Object to or restrict certain processing
Withdraw consent where processing is based on consent
Revoke Facebook Login permissions through Facebook settings

To make a request, use the public account-deletion page or contact support@novbe.az. We may need to verify the request before taking action.

Mobile users can also control camera and photo-library permissions through their device settings. Account contact and profile information can be corrected in the available profile settings or by contacting support.

Users who logged in with Facebook may request deletion of Facebook Login data connected to their Novbe account.

To request deletion:

Use Account settings in Novbe or the public Novbe account-deletion page.
Complete the identity-verification and ownership-resolution steps shown by Novbe.
If the automated flow is unavailable, email support@novbe.az with the subject line Facebook Login Data Deletion Request.

After receiving a valid request, Novbe will delete or anonymize Facebook Login data associated with the account unless retention is required for legal, security, fraud prevention, accounting, or dispute-resolution purposes.

Users may also remove Novbe from their Facebook account settings. Removing Novbe from Facebook can revoke future access permissions, but it does not automatically delete data already stored in Novbe systems. To delete stored Novbe account data, use the in-app or public deletion flow, or email support@novbe.az if the automated flow is unavailable.

Children’s Privacy

Novbe is intended for business and service-management use. It is not directed to children, and we do not knowingly collect personal data from children where parental consent is required by law.

Changes to This Policy

We may update this Privacy Policy when our services, data practices, or legal requirements change. When we make changes, we will update the “Last updated” date on this page.

Contact

For privacy questions, access requests, correction requests, deletion requests, or Facebook Login data deletion requests, contact:

support@novbe.az

Official support and verification channels are listed on the Novbe Contact page.

This policy applies to Novbe websites, web applications, mobile applications, and related services.