Privacy Policy
Effective date: September 9, 2026
Who we are and what this policy covers
Noviy Inc. ("Noviy", "we", "us") is a software company based in Ontario, Canada. We build and operate AI-powered software products, including Ravey, a product for local service businesses. This Privacy Policy explains how we collect, use and protect personal information when you visit our website, noviy.ai, or use our products and services.
Information we collect
Depending on how you interact with us and which products you use, we may collect contact information, such as your name, email address and phone number; account information, such as business details and product settings; and appointment information processed on behalf of businesses that use our products.
We may also process customer communications and content you choose to provide through our products, information you submit when contacting us, and technical information about use of our services, such as browser type, pages visited and service events. The sections below describe additional details for Ravey's referral service.
How we use information
We use personal information to provide, operate and maintain our products; facilitate communications that are initiated, requested or consented to by businesses and their customers; respond to inquiries and provide support; improve and develop our products; protect the security and integrity of our services; and comply with legal obligations.
We do not sell personal information.
Ravey referral accounts and rewards
Ravey uses your phone number to find or create your referral account and, when phone verification is enabled, to confirm that you control that number before registration or balance lookup. Referral records include your phone number, any name you provide, referral and account identifiers, registration time, referral relationships, and reward and visit activity. When you separately choose optional marketing messages during registration, we also record that choice, the consent wording and the time.
The participating business uses referral account and reward information to operate its program. A name you provide may appear to people who open your referral invitation and in referral activity. Some activity displays use a name or a masked phone number.
After a successful registration or balance lookup, Ravey can save your phone number in your browser's local storage to prefill it on a later visit. Browser settings can remove information stored on that device. Clearing browser storage does not delete records already held by us or our service providers.
If you choose to provide a photo for Ravey's referral caption feature, the image is sent to the configured AI service provider to help generate your caption. The referral caption service does not save that photo in its application storage.
Ravey phone verification
Ravey uses Twilio Verify to send verification codes by SMS and check the codes you enter. We provide Twilio with the phone number to be verified and submit the code you enter for checking. Ravey does not store the code itself in its referral database or verification event logs.
To document requests for verification messages, we keep the phone number, the time recorded by our server, the applicable notice and terms versions, the interface language, the request action and the request outcome. We use these records to demonstrate consent, respond to support requests and help prevent misuse.
Verification messages contain no marketing. Agreement to receive a verification code is separate from any optional agreement to receive marketing messages.
We also keep operational and security event logs, including request times and outcomes. Verification event logs use masked phone numbers; some security and rate-limit logs contain IP addresses. These logs are separate from the analytics described below.
Ravey service analytics
Ravey uses PostHog to understand referral registration, sharing and reward use, including how the front desk uses the referral service. Selected events include screen visits, action attempts and outcomes, language, shop, general browser and device categories, and pseudonymous identifiers. Browser identifiers are stored in local storage. Registration and reward events can be linked through an opaque account identifier; these identifiers are not names or phone numbers, but can connect activity over time.
Ravey's PostHog integration does not include typed names, phone numbers, message or caption content, photos, referral codes, account-access links, authentication tokens or raw page URLs as analytics properties. Automatic interaction capture and session replay are disabled.
Ravey uses PostHog's US Cloud service. Browser requests connect directly to PostHog, whose network infrastructure receives the connection's IP address even though IP storage and geolocation enrichment are disabled for this integration.
Consent to verification messages or optional marketing messages is not consent to analytics. Ravey does not currently provide an in-product analytics preference control. You can contact us about analytics and other privacy questions using the contact details below.
Third-party service providers
We rely on service providers to operate our business, including cloud hosting and infrastructure, service analytics, communications, email and AI service providers. These providers process information on our behalf and are bound by contractual obligations regarding its use and protection.
Information may be processed outside Canada, including the United States for the Ravey analytics described above.
Customer communications
Our products may use communications providers such as Twilio to facilitate phone, SMS or other customer communications. Where our products send SMS or place calls, those communications are initiated, requested or consented to by the relevant users or customers, for example an appointment confirmation or a reply to a customer's question. We do not use our products to send unsolicited bulk messaging.
Recipients of SMS messages can opt out by replying STOP where supported. For questions about messages, contact hello@noviy.ai.
Retention
We retain personal information only for as long as it is needed for the purposes described in this policy, to operate the relevant product or service, or as required by law. When information is no longer needed, we take reasonable steps to delete or de-identify it.
Security
We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration and loss. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your privacy rights and requests
We are committed to handling personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA). Subject to applicable law, you may request access to, correction of or deletion of your personal information. Where our products process information on behalf of a business, such as appointment records held for a salon, we may direct you to that business or assist it in responding.
To make a privacy request, contact hello@noviy.ai. We will respond within a reasonable timeframe.
Children
Our website and products are intended for businesses and their adult customers and are not directed at children.
Changes to this policy
We may update this Privacy Policy from time to time. The effective date above reflects the most recent revision. Material changes will be posted on this page.
Contact
Noviy Inc.
Ontario, Canada