Privacy Policy

At NovaBill, we value your trust more than anything. This Privacy Policy outlines our commitment to protecting the sensitive financial information of our users. By using our platform, you consent to the practices described in this document. We prioritize absolute transparency regarding data handling and security protocols.

Under the General Data Protection Regulation (GDPR), we process your data based on the following legal grounds:

• • Performance of Contract: To provide the billing services you signed up for.
• • Legal Obligation: To comply with financial reporting and tax regulations.
• • Consent: For marketing and analytical tracking (which can be withdrawn at any time).
• • Legitimate Interests: To prevent fraud and enhance system security.

We collect several types of data to ensure smooth operations:

To support the free tier of NovaBill, we integrate Google AdMob. This service may collect unique device identifiers such as the Google Advertising ID (GAID) or Apple ID for Advertising (IDFA).

You can reset these identifiers in your mobile device's settings to limit personalized advertising tracking.

Your data is used to generate legally compliant invoices, process recurring subscriptions, and provide technical support. We also analyze aggregated, non-identifiable usage patterns to improve user interface efficiency.

All user data is encrypted at rest and in transit. We primarily utilize Cloud Firestore for real-time database management, leveraging Google Cloud's enterprise-grade security infrastructure.

Servers are strategically located in multiple regions to ensure high availability and compliance with local data residency laws.

If you reside in the EEA, you have the right to access, rectify, or erase your data. You may also object to processing or request data portability. To exercise these rights, please contact our Data Protection Officer.

California residents have the right to request what personal information we collect and the right to delete that information. NovaBill does not "sell" or "share" personal information as defined by California law.

We strictly adhere to Law No. 2010/012 of 21 December 2010 relating to cybersecurity and cybercriminality in Cameroon, ensuring the protection of private life and digital identity across our African user base.

We share minimal necessary data with the following vetted partners:

• Firebase: For authentication and analytics.
• AdMob: For monetization of free features.
• Stripe: For secure PCI-compliant payment processing.

NovaBill does not store raw credit card details on our own servers. All financial transactions are proxied through Stripe, which maintains Level 1 PCI DSS certification.

We believe you should own your data. You can initiate a full account deletion via Settings > Security > Delete Account. This process permanently wipes all associated invoices and personal identifiers from our production servers within 30 days.

NovaBill is not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware of such collection, we will take immediate steps to delete the data.

We may update this policy periodically. Significant changes will be notified via in-app alerts or through the primary email associated with your account.

For any privacy-related inquiries, data access requests, or security concerns, please reach out directly to our engineering team: