Privacy Policy | ANNOVA Technologies LLC

1. Introduction & Who We Are

ANNOVA Technologies LLC ("Company," "we," "our," or "us") is a software development company providing custom web applications, workforce management tools, and related technology services. We operate the websites annova.tech and annovatech.com (collectively, the "Sites") and associated software products including MyShiftHub, Union Secretary, Expense Reporter, and Business Time-Off Manager (collectively, the "Services").

This Privacy Policy describes how we collect, use, disclose, retain, and protect your personal information when you visit our Sites, use our Services, or otherwise interact with us. By accessing or using our Sites or Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

If you do not agree with this Privacy Policy, please do not access or use our Sites or Services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

Submit a contact or inquiry form (name, email address, phone number, company name, budget range, project details)
Register for or use our software products (account credentials, organizational information)
Communicate with us via email or other channels (message content, attachments)
Enter into a service agreement or project engagement
Subscribe to newsletters or marketing communications

2.2 Information Collected Automatically

When you visit our Sites, we and our third-party service providers may automatically collect certain technical information, including:

IP address and approximate geographic location (country, state, city level)
Browser type, version, and language settings
Device type, operating system, and hardware identifiers
Pages visited, time and duration of visits, and navigation paths
Referring URL (the page you visited before arriving at our Site)
Search terms used to find our Sites
Crash reports and performance data

2.3 Cookies and Tracking Technologies

We may use cookies, web beacons, pixels, local storage, and similar technologies to operate and improve our Sites and Services. These include:

Essential Cookies: Necessary for the Sites to function and cannot be disabled.
Functional Cookies: Remember your preferences and settings.
Analytics Cookies: Help us understand how visitors interact with our Sites (e.g., Google Analytics, Firebase Analytics).
Performance Cookies: Measure and improve Site performance.

You may disable cookies through your browser settings; however, disabling certain cookies may affect the functionality of our Sites. Most browsers allow you to refuse cookies or to receive a notification when a cookie is set.

2.4 Third-Party Service Providers & Their Data Collection

Our Sites and Services utilize the following third-party services that may independently collect data subject to their own privacy policies:

Google Firebase / Firebase Hosting: Used for website hosting and backend infrastructure. Google's Privacy Policy applies: policies.google.com/privacy
Google Fonts: Used to serve typefaces (Inter, JetBrains Mono). Google may log requests. Google's Privacy Policy applies.
Font Awesome (via cdnjs / Cloudflare): Used to serve icons. Cloudflare's Privacy Policy applies: cloudflare.com/privacypolicy

We do not control and are not responsible for the data practices of these third-party providers. We encourage you to review their respective privacy policies.

3. How We Use Your Information

We use the information we collect for the following purposes:

To respond to your inquiries, provide consultations, and deliver requested services
To create, manage, and maintain your account and project relationship
To process payments and fulfill service agreements
To send transactional communications (project updates, invoices, support responses)
To send marketing communications, if you have opted in (you may opt out at any time)
To analyze and improve our Sites, Services, products, and user experience
To detect, prevent, and address technical problems, security incidents, or fraudulent activity
To comply with applicable laws, regulations, and legal obligations
To enforce our Terms of Service and other agreements
To protect the rights, property, and safety of ANNOVA Technologies LLC, our clients, and the public

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases:

Contract Performance: Processing necessary to fulfill our service agreements with you
Legitimate Interests: Processing for our legitimate business interests, including security, fraud prevention, and improving our Services
Consent: Where you have provided explicit consent (e.g., marketing emails)
Legal Obligation: Processing required to comply with applicable law

5. How We Share Your Information

We do not sell, trade, rent, or otherwise transfer your personal information to unaffiliated third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

Service Providers: Trusted vendors and contractors who assist us in operating our business (hosting providers, payment processors, email services, analytics platforms), subject to confidentiality obligations and only to the extent necessary to perform their services
Legal Compliance: When required by law, regulation, court order, subpoena, or governmental authority, or when we believe disclosure is necessary to protect our legal rights, enforce our agreements, or prevent harm
Business Transfers: In connection with a merger, acquisition, asset sale, or other business transaction, your information may be transferred as a business asset, subject to the same protections described in this policy
With Your Consent: For any other purpose with your explicit prior consent
Aggregated/Anonymized Data: Non-personally identifiable, aggregated data may be shared for industry analysis, benchmarking, or marketing without restriction

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, maintain our business records, resolve disputes, enforce our agreements, and comply with legal obligations. When determining retention periods, we consider:

The nature and sensitivity of the information
Applicable legal, regulatory, and contractual requirements
The purposes for which we collected the data and whether those purposes have been fulfilled

Contact form submissions are retained for up to 3 years. Client project records are retained for up to 7 years for accounting and legal purposes. You may request deletion of your data at any time, subject to our legal obligations to retain certain records.

7. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to, encryption of data in transit (HTTPS/TLS), access controls, and secure server environments.

HOWEVER, NO METHOD OF ELECTRONIC TRANSMISSION OR STORAGE IS 100% SECURE. WE CANNOT GUARANTEE ABSOLUTE SECURITY OF YOUR INFORMATION. YOU TRANSMIT INFORMATION TO US AT YOUR OWN RISK. If you believe your information has been compromised, please contact us immediately at info@annova.tech.

8. Your Rights and Choices

8.1 General Rights

Subject to applicable law, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information, subject to our legal obligations to retain certain records
Portability: Request a machine-readable copy of your data (where technically feasible)
Restriction: Request that we restrict processing of your data in certain circumstances
Objection: Object to processing based on legitimate interests
Withdraw Consent: Where processing is based on consent, withdraw that consent at any time

To exercise any of these rights, contact us at info@annova.tech. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

8.2 California Residents — CCPA/CPRA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: The categories and specific pieces of personal information we have collected about you in the past 12 months
Right to Delete: Deletion of personal information we have collected, subject to exceptions
Right to Correct: Correction of inaccurate personal information
Right to Opt-Out: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is currently required, but you may contact us to confirm
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
Right to Limit Use of Sensitive Information: We do not use sensitive personal information beyond what is necessary for our services

To submit a CCPA request, contact us at info@annova.tech with the subject line "CCPA Request." We will verify your identity and respond within 45 days, with a possible 45-day extension if needed.

8.3 Marketing Communications

If you receive marketing emails from us, you may opt out at any time by clicking the "unsubscribe" link in the email or by contacting us at info@annova.tech. Opting out of marketing does not affect transactional communications related to active services or projects.

8.4 Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. Our Sites do not currently respond to DNT signals because there is no industry-standard approach to honoring such signals. We will reassess this position as standards develop.

9. Children's Privacy

Our Sites and Services are intended for businesses and professionals and are not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently collected personal information from a minor, we will promptly delete such information. If you believe we have collected information from a minor, please contact us immediately at info@annova.tech.

10. International Data Transfers

Our Sites and Services are operated in the United States. If you access our Sites from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using our Sites and Services, you consent to such transfer, storage, and processing.

11. Third-Party Websites & Links

Our Sites may contain links to third-party websites, services, or resources. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices, content, or data security of any third-party websites. We encourage you to review the privacy policies of any sites you visit through links on our Sites.

12. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we may also provide additional notice such as posting a notice on our homepage or sending an email notification to known users. Your continued use of our Sites or Services after any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

13. Contact Us & Data Requests

For questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

Email: info@annova.tech
Website: annova.tech/contact
Mailing: ANNOVA Technologies LLC — available upon request

We take privacy concerns seriously and will respond to all requests within 30 days.