Privacy Policy

At Zovo LLC ("Notase," "we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and platform (collectively, the "Service"). Please read this policy carefully. By using the Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide to Us

• Account Information: Name, email address, password, and profile details when you create an account.
• Billing Information: Payment method details processed through Stripe. We do not directly store your credit card numbers on our servers.
• Property Data: Listing details, property descriptions, photos, and other real estate information you input into the Service.
• Communications: Messages, feedback, support requests, and other correspondence you send to us.
• Workspace Information: Team member details, workspace settings, and collaboration data for multi-user accounts.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken, time spent on the Service, and interaction patterns.
• Device Information: Browser type, operating system, device type, screen resolution, and unique device identifiers.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: We use cookies, local storage, and similar technologies as described in our Cookie Policy.

1.3 Information from Third Parties

• Authentication Providers: If you sign in using a third-party provider (e.g., Google), we receive your name, email, and profile picture from that provider.
• Payment Processor: Stripe may share transaction details, payment status, and billing-related information with us.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service, including generating AI-powered content, managing your listings, and enabling collaboration features.
• Process transactions and send billing-related communications.
• Improve and personalize the Service, including developing new features, analyzing usage patterns, and optimizing performance.
• Communicate with you, including sending service updates, security alerts, and support responses.
• Send marketing communications (with your consent) about product updates, tips, and promotions. You can opt out at any time.
• Ensure security and prevent fraud, including monitoring for suspicious activity and enforcing our Terms of Service.
• Comply with legal obligations and respond to lawful requests from public authorities.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service Providers: We share information with trusted third-party service providers who perform services on our behalf, including:
  • Stripe (payment processing)
  • OpenAI (AI content generation - property data is sent for processing)
  • Resend (email delivery)
  • Vercel (hosting and infrastructure)
  These providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures.
• Workspace Members: If you use team features, certain information (such as listings and content) will be accessible to other members of your workspace as configured by your workspace administrator.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Notase, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have regarding your information.
• With Your Consent: We may share your information for other purposes if you provide explicit consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account Data: Retained while your account is active and for 30 days after account deletion.
• Billing Records: Retained for a minimum of 7 years to comply with tax and accounting obligations.
• Usage Logs: Retained for up to 12 months for analytics and security purposes.
• Support Communications: Retained for up to 3 years after resolution.

You may request deletion of your data at any time by contacting us at support@notase.com.

5. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Access Controls: Role-based access controls and the principle of least privilege for all internal systems.
• Workspace Isolation: Multi-tenant architecture ensures complete data isolation between workspaces.
• Authentication: Secure password hashing (bcrypt), session management, and optional multi-factor authentication.
• Infrastructure: Hosted on enterprise-grade cloud infrastructure with regular security updates and monitoring.
• Backups: Automated daily backups with point-in-time recovery capabilities.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach as required by applicable law.

6. Your Rights and Choices

6.1 All Users

Regardless of your location, you have the right to:

• Access your personal information and request a copy of the data we hold about you.
• Correct inaccurate or incomplete personal information.
• Delete your account and associated personal information.
• Export your data in a portable format.
• Opt out of marketing communications at any time.
• Withdraw consent where processing is based on consent.

6.2 European Economic Area (EEA) Residents - GDPR

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to restrict processing of your personal data.
• The right to data portability.
• The right to object to processing based on legitimate interests.
• The right to lodge a complaint with a supervisory authority.

Our legal basis for processing your data includes: performance of a contract, legitimate interests, consent, and compliance with legal obligations.

6.3 California Residents - CCPA/CPRA

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information is collected, used, shared, or sold.
• The right to delete personal information held by us.
• The right to opt out of the sale of personal information. Note: We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.
• The right to correct inaccurate personal information.
• The right to limit the use of sensitive personal information.

To exercise any of these rights, please contact us at support@notase.com. We will respond within the timeframes required by applicable law.

7. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. When we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data receives an adequate level of protection.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us at support@notase.com.

9. Third-Party Links and Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

10. AI and Automated Processing

Our Service uses artificial intelligence (AI) to generate content based on your inputs. When you use our AI-powered features:

• Your property data and inputs are sent to our AI processing partners (currently OpenAI) to generate content.
• We do not use your data to train AI models. Your content is processed on-demand and is not retained by our AI partners for model improvement.
• Generated content is stored in your account and subject to the same data protection measures as all other data.
• You retain ownership of all generated content and may use it without restriction.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and/or by posting a prominent notice on the Service at least thirty (30) days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, you may also contact us at support@notase.com.