Privacy Policy

1. Who we are

gonovu is a web application that helps users find local businesses, specifically those without a website. The service is accessible at gonovu.com.

2. What data we collect

Account data

When you create an account, we collect your email address and any other information you provide through our authentication provider (Clerk). We do not store passwords directly. Authentication is handled by Clerk.

Search data

We store the searches you run (business type, keywords, location, and results) so you can access your search history and re-download results later. This data is associated with your account.

Device location (optional, opt-in)

The app includes a “Use my location” button next to the location field. If you tap it, your browser will ask you to allow location access. If you allow it:

• Your device's GPS coordinates (latitude and longitude) are sent with that search and stored in our database alongside the search record.
• Administrators of gonovu can see these coordinates when reviewing user activity, for product analytics and abuse prevention.
• The coordinates are shared per-search — clicking “clear” on the “Sharing your GPS” indicator removes them before you submit, and we never collect your location passively. If you never tap the button, no GPS is ever collected.
• You can request deletion of your stored coordinates at any time (see “Your rights” below).

Reverse-geocoding the coordinates into a human-readable address sends only the lat/lng pair to our geocoding providers (OpenStreetMap Nominatim and Komoot Photon).

Payment data

Payments are processed by Stripe. We do not store your card details. We receive and store only the status of your subscription (active or cancelled) and your Stripe customer ID.

AI-generated content

When you use the AI pitch generation feature, the business name, category, and location from your search results are sent to Google Gemini to generate personalised outreach messages. The generated text is stored in our database and associated with your account. No personal data about you is included in the prompt sent to Gemini.

Usage data

We may collect basic server logs including IP addresses and request timestamps for security and debugging purposes. We do not use third-party analytics trackers.

3. How we use your data

We use your data solely to provide and improve the gonovu service:

• To authenticate you and manage your account
• To run searches on your behalf and store results for your access
• To manage your subscription and billing
• To respond to support requests
• To prevent fraud and abuse

We do not sell your data. We do not share your data with third parties for advertising purposes.

4. Third-party services

We use the following third-party services to operate gonovu:

• Clerk for authentication and user management
• Stripe for payment processing and subscription management
• Supabase for database storage (hosted in the EU)
• Vercel for application hosting
• Cloudflare for DNS, CDN, and tunnel services
• Google Gemini for AI pitch generation. Only business details (name, category, location) are sent — no personal or account information.
• OpenStreetMap Nominatim and Komoot Photon for geocoding (resolving location names and coordinates). Only the search text or coordinates you provide are sent — no account information.

Each of these providers has their own privacy policy and data processing terms. Data processed by Supabase is stored in EU data centers (eu-west-1).

5. Data retention

We retain your account data for as long as your account is active. Search history and results are stored indefinitely so you can access past searches, but you can delete individual searches at any time from within the app.

If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your data
• Portability: request your data in a portable format
• Objection: object to certain uses of your data

To exercise any of these rights, contact us at the email address below.

7. Cookies

We use only essential cookies required to keep you signed in and maintain your session. We do not use advertising or tracking cookies.

8. Security

We take reasonable technical measures to protect your data, including encrypted connections (HTTPS), access controls, and using established cloud providers. No system is 100% secure. If you discover a security issue, please contact us immediately.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or by a notice in the application. Continued use of gonovu after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this privacy policy or your data, please contact us at: privacy@gonovu.com