Your work data remains yours.

Who is responsible for your data?

Neovois Ltd, 1121 San Antonio Road, Palo Alto, CA 94303, United States, is the data controller for website visits, direct user accounts, billing, support, security and our own product operations. Contact our privacy team at hello@neovois.com.

When an organisation connects its systems and determines why and how its workspace data is used, that organisation is normally the controller and Neovois Ltd acts as its processor under its instructions. Individual users should contact their organisation first for requests about employer-controlled data. Our Data Processing Addendum is available for business customers.

Information we collect

• Account and profile data: name, email address, authentication identifiers, plan and workspace membership.
• Connected-workspace data: information you authorise Neovois to retrieve from a connected provider. Access depends on the provider and permissions displayed during connection.
• Billing data: plan, subscription status, transaction identifiers and limited billing details. Stripe processes complete payment-card details; Neovois does not store them.
• Support and contact data: name, email, company, topic, message, correspondence and privacy acknowledgement.
• Technical and usage data: IP address, browser and device information, session, security, synchronisation, error and privacy-safe product events.

Purposes and GDPR legal bases

• Contract: to create and administer your account, provide requested features, synchronise authorised sources, enforce plan entitlements, process subscriptions and respond before entering a contract.
• Legitimate interests: to secure and operate Neovois, prevent fraud and abuse, diagnose failures, improve reliability, understand aggregate product use and answer support requests. We balance these interests against your rights and do not use connected-workspace content for advertising.
• Consent: for optional marketing, non-essential cookies or processing where consent is requested. You may withdraw consent at any time without affecting earlier lawful processing.
• Legal obligation: to keep required financial records and respond to valid legal process.

Where Neovois acts as a processor, the customer determines the relevant legal basis and Neovois processes data only on documented instructions, except where law requires otherwise.

How we use and disclose information

We use information to authenticate users, operate and personalise the workspace, fulfil requested analyses, provide support, process payments, maintain security and improve service reliability. We disclose only what is necessary to authorised workspace members, service providers, connected providers at your direction, professional advisers, a successor in a corporate transaction, or authorities where legally required. Neovois does not sell personal data or connected-workspace content.

Automated processing and AI

Neovois may use automated tools to organise connected information and generate requested briefings or insights. These features are assistive and may be inaccurate. Neovois does not currently make decisions based solely on automated processing that produce legal or similarly significant effects about individuals. Customers must not use Neovois output as the sole basis for employment, credit, health, legal or similarly consequential decisions.

International data transfers

Neovois is based in the United States and uses providers that may process data in the United States, the European Economic Area and other countries. Where GDPR-restricted data is transferred to a country without an applicable adequacy decision, we use an approved transfer mechanism such as the European Commission's Standard Contractual Clauses, together with supplementary measures where appropriate. For UK-restricted transfers we use an applicable UK transfer mechanism. You may request information about the relevant safeguards at hello@neovois.com.

Retention and deletion

We retain personal data only for the purpose and period described below, unless law, a dispute, security needs or a customer agreement requires a different period:

• active account and subscription records: for the account term;
• OAuth credentials: until the connection is removed or the account is deleted;
• connected context: up to 30 days on Free and 12 months on Pro, subject to the connected provider and product configuration;
• sessions: up to 30 days;
• synchronisation, audit, security and product events: up to 12 months;
• contact and support enquiries: up to 12 months after the last interaction;
• billing, tax and transaction records: up to seven years where required;
• encrypted database backups: removed through the normal backup rotation, currently within 14 days.

Account deletion removes active account and locally stored workspace data, normally within 30 days, and residual copies age out of backups within the backup cycle. We may retain a minimal record where required for legal compliance, fraud prevention, dispute resolution or enforcement. Enterprise customers may agree different documented periods.

Your privacy rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or a copy of your personal data; object to processing based on legitimate interests; withdraw consent; and complain to your local data protection authority. You also have the right not to be subject to qualifying solely automated decisions. Email hello@neovois.com to exercise a right. We may verify your identity and will normally respond to GDPR requests within one month. Some rights are limited by law and the rights of others.

Security

Neovois uses measures designed to protect data, including least-privilege access, tenant-aware sessions, encrypted OAuth tokens, approval boundaries, logging and encrypted backups. No internet service can guarantee absolute security. Please notify us promptly if you believe your account or data is at risk.

Subprocessors and connected providers

Neovois uses carefully selected service providers to host and operate the service. Our current list, purposes, locations and change process are published on the Subprocessors page. Connected services you choose to authorise also process data under their own agreements and privacy policies.

Children, changes and representatives

Neovois is a business productivity service and is not directed to children under 16. We may update this policy as the service or law changes and will publish the new effective date and provide additional notice where required. Where appointment of an EU or UK representative is legally required, the representative's details will be published here before the relevant processing begins.

Contact

Privacy requests and questions: hello@neovois.com
Neovois Ltd
1121 San Antonio Road
Palo Alto, CA 94303
United States