Introduction
Nova Telematics Ltd. (“Nova”, “we”, “us”) explains here how we collect, use, share, and protect personal information in connection with Nova RentalHub (the “Service”). This Policy applies to our websites (including novarentalhub.com and novatelematics.com) and the Service.
Nova acts as a controller for some data (e.g., our sites, billing, product analytics) and as a processor on behalf of Operators (e.g., renter/customer data inside an Operator’s workspace). If you are a customer of an Operator, please contact that Operator first for privacy requests—we support them as processor where required.
1. Information We Collect
- Account & Profile: name, email, phone, company, role, login tokens, profile image.
- Operator Workspace Data (processor): reservations, vehicle details, pricing, contracts, uploads, license metadata/images, pickup/return data, notes.
- Telematics/Device Data (processor): GPS/coordinates, speed, ignition, odometer, diagnostic/faults, accessory inputs (e.g., PTO), and optional immobilization status when enabled via integrations (e.g., Geotab, Navixy).
- Payment Data: handled by processors (e.g., Stripe). We don’t store full card numbers.
- Communications: support tickets, emails, chat messages, optional call logs/voicemails.
- Usage & Logs: IP, device/browser, pages, timestamps, referrers, interactions, crash/error logs.
- Cookies/Similar Tech: session & preferences, analytics, and (if enabled) marketing. See our Cookie Policy.
2. Sources
Directly from you; from your Operator; from enabled integrations (telematics, payments, messaging); and automatically from your device/browser.
3. How We Use Information
- Provide, operate, secure, and improve the Service (authentication, fraud prevention, debugging, analytics).
- Fulfill contracts with Operators and process transactions.
- Personalize features, remember preferences, and deliver notifications.
- Provide support and communicate updates or policy changes.
- Comply with law, enforce Terms, and protect rights, property, and safety.
- De-identify/aggregate for insights and reporting.
Legal bases (EEA/UK/CH): contract, legitimate interests (e.g., security), consent (e.g., certain cookies/marketing), and legal obligations.
4. Sharing & Disclosures
We share information with service providers/sub-processors (e.g., Google Cloud/Firebase/Cloud Run/Storage; Stripe; telephony such as Twilio/WhatsApp; telematics such as Geotab/Navixy; analytics/error monitoring); with Operators (for workspace usage); with professional advisors and authorities when required; and in business transfers. We do not sell personal information. See Security for categories and examples.
5. International Transfers
Data may be processed or stored outside your country (e.g., Google Cloud us-central1, USA). For EEA/UK/CH transfers we use appropriate safeguards (e.g., Standard Contractual Clauses and the UK Addendum) where applicable.
6. Data Retention
We retain information as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Operators control retention for their workspaces. Export/delete tools and support are available.
7. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, port, or object to processing, and to withdraw consent. For Operator-controlled data, contact the Operator first. For Nova-controlled data (e.g., website/billing), email privacy@novatelematics.com. You may also contact your supervisory authority or privacy commissioner.
U.S. State Privacy Disclosures (e.g., California/CPRA, Virginia, etc.)
- You can request access, deletion, and correction of personal information we control.
- We do not “sell” or “share” personal information as defined by CPRA, nor do we use sensitive personal information for purposes requiring a “limit the use” link.
- Use our Cookie Policy and any site consent tools to manage analytics/marketing cookies.
Canada (PIPEDA/Provincial Laws)
For Nova-controlled data, you may request access or correction and file complaints. Contact privacy@novatelematics.com. For Operator-controlled data, contact the Operator.
8. Children
The Service is not directed to children under 16. If you believe a child provided personal information, contact us to delete it.
9. Security
We employ technical and organizational measures including encryption in transit/at rest, role-based access controls, logging, backups, and testing. No method of transmission or storage is 100% secure. See Security for program details.
10. Do Not Track
Our sites may not respond to DNT signals. Manage preferences via our cookie banner and your browser/device settings. Use to adjust consent where available.
11. Changes
We may update this Policy and will notify you of material changes (e.g., via product notice or email). Your continued use after the effective date indicates acceptance.
12. Contact
Privacy: privacy@novatelematics.com
Security: security@novatelematics.com
Nova Telematics Ltd., Canada