Privacy Policy – Ovio Merchant App

Last updated: September 2025

Novalia Solutions (“we,” “our,” “us”) operates the Ovio Merchant App (“the App”), a mobile application designed for businesses to manage offers, validate coupon redemptions, and access analytics. We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and share information when you use the App.

1. Data Controller

The controller responsible for your personal data under applicable data protection law is:

Novalia Solutions

31 Rue Alsace Loraine

Toulouse, France

email: contact@novalia-solutions.com

2. Scope

This Privacy Policy applies exclusively to the Ovio Merchant App. It does not cover the Ovio Student App or the Ovio Admin Dashboard.

3. Information We Collect

We only collect the information necessary to operate the App, including:

• Account information: email address, password.

• Business information: merchant name, VAT number, logo, Stripe customer ID, offers created, and redemptions processed.

• Technical information: limited device and connection information (e.g., IP address, system logs) necessary for security and service delivery.

We do not collect sensitive personal data (such as race, religion, or biometrics), phone numbers, or geolocation data.

4. How We Use Your Information

We process your data solely for the following purposes:

• To provide and operate the App’s functionalities (merchant profiles, offers, redemptions, analytics).

• To process billing and payments via Stripe.

• To maintain the security and integrity of the App.

• To comply with legal and tax obligations.

We do not use your data for advertising, profiling, or unrelated marketing purposes.

5. Sharing of Information

We do not sell your personal data. Your information may be shared with:

• Service providers:

• Supabase (database hosting, located primarily in the EU).

• Stripe (payment processing, with servers possibly located outside the EU).

• Authorities: where required by law or to protect our legal rights.

6. International Data Transfers

Your data is primarily stored within the European Union. However, some services (such as Stripe) may process data outside the EU, including in the United States.

Where such transfers occur, we rely on appropriate safeguards under the GDPR (e.g., Standard Contractual Clauses).

7. Data Retention

We retain personal data only for as long as your merchant account is active. Certain billing and transaction data may be retained for legal, accounting, and tax purposes even after account deletion.

8. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract: to provide you with the App’s services.

• Legal obligation: to comply with tax and financial record-keeping requirements.

• Legitimate interest: to ensure the security and proper functioning of the App.

9. Your Rights

As an EU user, you have the following rights under the GDPR:

• Access to your personal data.

• Rectification of inaccurate or incomplete data.

• Erasure of your data (“right to be forgotten”).

• Restriction of processing.

• Data portability.

• Objection to processing in certain circumstances.

You may exercise these rights by contacting us at contact@novalia-solutions.com.

If you believe your data protection rights have been violated, you also have the right to lodge a complaint with your local supervisory authority (e.g., CNIL in France).

10. Children’s Privacy

The App is intended strictly for business use. It can be used by people under the age of 18.

11. Security

We implement industry-standard security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. However, no method of electronic storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If material changes are made, we will notify you through the App or by email.

13. Contact

If you have questions about this Privacy Policy, please contact us at: contact@novalia-solutions.com