Privacy Policy | Anovas Integrated Systems

Anovas Integrated Systems LLC respects your privacy and is committed to protecting the personal and business information you share with us. This Privacy Policy explains how we collect, use, store, share, and protect information when you use our website, products (Anovas Autopilot, AnovasOS), and professional services.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

• Business clients and their representatives who use Anovas Autopilot or AnovasOS.
• Prospective clients who complete the AROS Growth Score, submit inquiry forms, or interact with our website or marketing materials.
• End users (customers of our clients) whose contact information is processed by Anovas on behalf of our clients as part of Anovas Autopilot automations.

AnovasOS is a business-to-business platform and is not intended for personal or consumer use. We do not knowingly collect personal information from individuals under the age of 18.

3.1 Information You Provide Directly

• Account and contact information: name, business name, email, phone, business address, and business type.
• Business diagnostic data: responses to our AROS Growth Score assessment.
• Service communications: messages, approvals, instructions, and content you provide during service delivery.
• Payment information: billing name, address, and payment method. Full payment card numbers are processed and stored exclusively by Stripe and/or PayPal and are never stored on Anovas servers.

3.2 Customer Data Processed on Your Behalf. As part of Anovas Autopilot, you may provide us with contact information for your customers and leads. We process this data solely on your behalf and under your instruction. You are the data controller. We are the data processor. You are responsible for ensuring you have obtained all legally required consents.

3.3 Information Collected Automatically.

• Usage data: pages visited, time spent, links clicked, referring URLs.
• Device and browser data: IP address, browser type, operating system, device identifiers.
• Cookie data: as described in our Cookie Policy.

3.4 Information from Third-Party Sources. We may receive information from HubSpot (CRM), n8n (workflow automation), and Microsoft 365 (communications).

• Deliver and manage Services.
• Process payments through our payment processors.
• Communicate with you regarding onboarding, billing, and support.
• Improve our Services by analyzing usage patterns.
• Sales and marketing follow-up (you may opt out at any time).
• Comply with legal obligations.
• Detect, prevent, and address fraud and abuse.

5.1 Primary Database. Personal and business data is stored in Supabase, a cloud database provider operating in the United States, with encryption at rest and in transit.

5.2 Payment Data. Stored and managed exclusively by Stripe and/or PayPal on PCI-DSS-compliant infrastructure. Anovas stores only non-sensitive billing identifiers.

5.3 CRM and Communications. Client contact and pipeline data is stored in HubSpot. Business communications are processed through Microsoft 365. Workflow execution logs are stored in n8n cloud.

5.4 Data Location. All primary vendors are US-based. We do not intentionally transfer personal data outside the United States.

We do not sell your personal information. We do not share your information with third parties for their own marketing purposes. We share information only:

• With service delivery partners (Supabase, HubSpot, Stripe, PayPal, n8n, Microsoft 365) solely to deliver the Services.
• Per your instructions for integrations or implementations you direct.
• Under legal requirements (subpoena, court order, legal process).
• In connection with a business transfer (merger, acquisition, or sale of assets), with notice provided.

• Active client data: duration of service engagement plus three (3) years.
• Prospect and lead data: up to two (2) years from date of last contact.
• Customer data processed on your behalf (Autopilot): duration of service agreement plus twelve (12) months, then deleted or anonymized.
• Payment records: as required by applicable tax and financial regulations (generally seven years).

8.1 Access and Correction. Request access to or correction of your personal information at support@anovasintegratedsystems.com.

8.2 Deletion. Request deletion of your personal information, subject to our legal obligations to retain certain records.

8.3 Opt-Out of Marketing. Unsubscribe from marketing emails via the unsubscribe link in any marketing email or by emailing us. Transactional communications related to your active service will continue.

8.4 Do Not Track.Our website does not currently respond to "Do Not Track" browser signals.

8.5 California Residents. California residents may have additional rights under the CCPA, including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. Contact us to exercise your rights.

We implement reasonable technical and organizational measures including:

• Encryption of data in transit (TLS) and at rest.
• Access controls limiting data access to authorized personnel and service providers.
• PCI-DSS-compliant payment processors for all payment data.

No method of electronic storage is 100% secure. We cannot guarantee absolute security.

Our website and Services may contain links to third-party sites. This Privacy Policy does not apply to those sites.

Our Services are not directed to individuals under 18. If you believe we have inadvertently collected information from a minor, contact us immediately at support@anovasintegratedsystems.com and we will delete it.

We will notify you of material changes by email or website notice at least fourteen (14) days before changes take effect. Continued use after the effective date constitutes acceptance.

Anovas Integrated Systems LLC
Little Rock, Arkansas
support@anovasintegratedsystems.com