Privacy Policy

This policy explains what information Vanova collects, why, and what happens to it. It covers two different people at once: the business owners who run their booking page on Vanova, and the customers who book appointments through one of those pages. Where the answer differs between the two, it says so.

What we collect

From a business owner: your name, email address, and password (handled by our authentication provider, Supabase - we never see or store your raw password), your business profile (business name, description, logo, cover photo, contact details, opening hours), and anything you connect on purpose: a bank account for taking payments (verified with, and paid out through, Flutterwave - see “How it’s used” below for what that means), a Telegram bot, a WhatsApp Business number, or a Facebook Page for Messenger.

From a customer booking an appointment: your name, and whichever contact method you book through - phone number, email address, or your Telegram/WhatsApp/Messenger identifier - plus the service and time you booked. If the business requires payment to confirm, your payment is handled by Flutterwave; we never receive or store your card details.

From anyone using the AI chat on a business’s booking page or through Telegram/WhatsApp/ Messenger: the messages you send, so the assistant can check availability and complete a booking.

How it’s used

• To run the actual product: showing your booking page, checking availability, confirming appointments, and sending confirmation emails.
• To power the AI receptionist - your messages are sent to our AI provider (OpenAI) to generate a reply; they are not used to train OpenAI’s models on our current arrangement.
• To process payments - handled by Flutterwave, whether it’s a customer paying a business or a business paying its own Vanova subscription. A customer’s payment to a business runs through Vanova’s own Flutterwave account (split automatically to that business’s linked bank account, never held by us) rather than an account the business controls directly - see the Terms of Service for what that means for who’s responsible for it. We never see your full card number.
• To send transactional email (booking confirmations, reminders, staff invites) through Resend.
• To improve reliability and fix problems - basic error logging, without which we can’t tell when something is actually broken for you.

We do not sell personal data, to anyone, ever.

Who we share it with

Only the providers that make the product work, and only what each one needs to do its job:

• Supabase - database hosting and authentication for every account and booking.
• OpenAI - powers the AI receptionist’s replies.
• Resend - sends transactional email on our behalf.
• Flutterwave - processes a customer’s payment to a business (when a business turns that on) and a business’s own subscription payment to us.
• Telegram / Meta (WhatsApp, Messenger) - only if a business owner chooses to connect one of these channels, and only for messages sent through that channel.

We may also disclose information if required by law, or to protect the rights, property, or safety of Vanova, our users, or the public.

Cookies and local storage

We use a session cookie to keep you signed in (set by Supabase Auth) and, on a public booking page’s chat widget, a random identifier stored in your browser’s local storage so a conversation can continue if you come back to the same page. Neither is used for advertising or cross-site tracking.

How long we keep it

Booking and account data is kept for as long as an account is active, so a business can see its own history and a customer can manage their own bookings. If a business owner closes their account, we delete their business data within a reasonable period, except where we’re required to keep records (for example, payment records) for a longer legal or accounting purpose.

Your rights

You can ask to see, correct, or delete the personal data we hold about you. A business owner can do most of this directly from their dashboard; a customer can do the same from their account, or by contacting the business they booked with, or by contacting us directly using the details below.

Children

Vanova is a business tool and isn’t directed at children. We don’t knowingly collect data from anyone under 18.

Changes to this policy

If this policy changes in a material way, we’ll update the date at the top and, where practical, let account holders know.

Contact

Questions about this policy, or a request about your data: bookings@vanovahub.com.

Operated by Vanova Hub, based in Nigeria and governed by the laws of the Federal Republic of Nigeria.