Privacy Policy

1. Who we are

This site is published by Nova Technologies and Business Solutions (Private) Limited, a company registered in Pakistan. You can reach us at business@novatecsolution.com or on +92 336 528 1952 (Pakistan).

This policy covers this website and the Nova HRM mobile app for employees, which section 14 describes. It does not cover the Nova HRM web application, which runs in a separate database for each customer under that customer's own agreement. In that setting the customer is the controller of their employees' data and we act on their instructions — section 6 of the Terms and Conditions sets out the split.

Nor does it cover the iConnect app, which collects different data — phone numbers, job locations and, for tradesmen, identity documents — and is described in its own privacy policy.

2. Before you answer the banner

There is no account and no login on this site, and nothing is stored on your device or about you until you choose otherwise. We use Google’s Consent Mode: the tags are present on the page but are explicitly denied permission to store anything, so no cookie is created and no identifier is kept that could recognise you on a later visit.

To be straightforward about what does happen: because a tag is on the page, Google receives a basic, cookieless signal when it loads — the address of the page, your IP address and your browser’s user agent, as with any request to any server. It is not tied to an identifier and cannot be linked to your other visits. We use this arrangement so that Google’s own tools can confirm the tag is installed correctly.

3. Analytics, once you accept

If you press Accept, we grant Google Analytics 4 permission to store and measure properly, so we can see which pages people find useful. It records the pages you view, roughly where you are (derived from your IP address, which Google truncates), your device and browser, and the site that referred you.

We have not enabled any advertising or remarketing signals inside Analytics, and we do not upload customer lists to it.

You can withdraw at any time using Cookie settings in the footer of any page. Declining revokes the permission and deletes the analytics cookies already in your browser.

4. Advertising

This site carries no advertising at present. The consent banner still asks about it, because the moment that changes we would rather already hold your answer than start collecting it retroactively.

Advertising cookies are set only if you accept. If you decline, Google is instructed not to store an advertising identifier, and any advert shown is non-personalised — chosen from the content of the page rather than from anything about you.

We never give an advertiser your name, your email address or anything you typed into the enquiry form. We do not sell personal data. The Cookie Policy lists every advertising cookie by name.

5. The enquiry form

If you submit the form on the contact page, we receive what you typed: what your enquiry is about, first and last name, work email, company name, company size if you gave it, your role, country, and any notes you add. Alongside it, the message records the date and time, the IP address the form was sent from, and the page you sent it from — we use those to recognise automated submissions, not to build a profile.

It arrives as an email in our business inbox. We use it to answer you and to arrange the demo. It is not added to a marketing list, and we do not pass it to anyone else.

6. Cookies and storage, in full

The Cookie Policy explains each of these in more detail, including how long they last.

7. Fonts and third-party requests

The typefaces on this site are served by us, from this domain. They are not fetched from Google Fonts, so loading a page does not disclose your IP address to a font CDN — not before you answer the banner, and not if you decline.

This was not always true. The fonts were served from fonts.googleapis.com until we moved them, and this page said so at the time. We mention the history because a privacy policy that quietly improves is no more trustworthy than one that quietly gets worse.

The practical effect is that, before you consent, the only third party that hears from your browser at all is Google’s measurement tag, in the cookieless form described in section 2.

8. Server logs

Like every website, our hosting keeps standard access logs — IP address, time, the page requested, the referring page and the user agent. They exist to keep the site up and to investigate abuse, they are not used to build a profile of you, and they are not combined with anything else on this page.

9. Why we are allowed to hold it

• Analytics and advertising storage — your consent, which you may withdraw at any time. The cookieless signal in section 2 rests on our legitimate interest in knowing the site works, and stores nothing on your device.
• Demo requests — taking steps at your request before entering a contract, and our legitimate interest in answering people who write to us.
• Server logs — our legitimate interest in keeping the site up and secure.

10. How long we keep it

Analytics data is retained for the period configured in our Google Analytics property. Demo enquiries stay in our business email for as long as we need them to answer you and keep a record of the conversation. Ask us to delete yours and we will.

11. Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to our using it.

Where a jurisdiction grants further rights, those apply too — the GDPR in the European Economic Area and the United Kingdom, and the Personal Data Protection Law (Royal Decree M/19 of 2021, as amended) in the Kingdom of Saudi Arabia. Pakistan has no comprehensive data protection statute in force at the date above, so the commitments on this page are contractual there rather than statutory — which is precisely why we would rather write them down.

Write to business@novatecsolution.com and we will answer. You do not need to explain why, and it costs nothing.

12. Where the data goes

We operate from Pakistan. If you accept analytics or advertising, Google processes that data on its own infrastructure, which is outside Pakistan, under its own terms.

An enquiry is an email; it sits with our business email provider.

13. Children

This is a website about business software. It is not directed at children and we do not knowingly collect anything from them.

14. The Nova HRM mobile app

The Nova HRM app lets an employee clock in and out, keep track of their time, and see their own employment record. Your employer chooses to use Nova HRM, creates your account and decides how your attendance is recorded. Your employer is the controller of the information it holds about you; we provide the service and act on its instructions.

What the app collects.

• Sign-in details — your work email and the company you connect to.
• Your location when you punch — where your phone is when you check in, check out or record a site visit, and how accurate that reading was.
• Your location during a field duty you start — at the interval your company sets, until you end the duty. A notification stays on screen the whole time it runs.
• A selfie, when your company asks for one with a punch. It is taken with the camera; photos from your gallery are never used.
• What you write — the reason you give when you ask for a correction, and a manager’s note when they decide one.
• Details of your phone — its model, system version, the app version, an identifier for this installation, and whether it reports a simulated location or is an emulator.
• A notification token, so your company can send you notifications.

What it does not do. The app does not track you in the background. Your location is read only when you punch, or while a field duty you started is running. It does not read your contacts, your photo library, your microphone or your browsing. It contains no advertising, analytics or crash-reporting tools, and nothing it collects is sold or used for advertising. If you lock the app with your fingerprint or face, that check is made by your phone and never leaves it.

How it is used. To record your attendance and calculate your working time, to check a punch against your workplace’s geofence, to help HR review punches that need a second look, to keep your account and phone secure, and to send you notifications about your requests and punches.

Who sees it. People at your company with permission: HR, and your manager for your team’s days. Locations and selfies are never shown in lists — HR opens them one punch at a time, and every time they do is recorded. Our staff see your company’s data only when your company asks us for support. Two Google services carry part of the work: Firebase Cloud Messaging delivers notifications to your phone, and the check-in screen shows a Google map of your workplace, so Google receives the map area being displayed. Your company’s data is stored on our hosting provider’s servers.

How long it is kept. Your company decides how long locations and selfies are kept. When that period ends they are deleted, and the punch’s time and result stay as part of your attendance record.

How it is protected. Everything the app sends travels encrypted over HTTPS. Your sign-in is kept in your phone’s secure storage, and punches waiting to be sent are kept in an encrypted database on the phone until they are sent.

Your choices.

• You can turn off location, camera or notifications in your phone’s settings. Without location, your punches are sent to HR for review, and HR can still record your time.
• Removing a company in the app’s Settings, or uninstalling the app, deletes everything it left on your phone.
• To see, correct or delete the information your company holds about you, contact your HR team. You can also write to business@novatecsolution.com and we will pass your request to your employer and act on its instructions.

The app is for employees of the companies that use Nova HRM. It is not directed at children.

15. Changes to this policy

If we change how any of this works, we change this page and update the date at the top. Material changes reset the cookie banner, so you are asked again rather than being held to an answer you gave about something else.

16. Contact

Nova Technologies and Business Solutions (Private) Limited
Pakistan
business@novatecsolution.com
+92 336 528 1952 (Pakistan)