Get a demo

Privacy Policy

Novi Most LLC privacy practices · Version 2026-10-01

Document version 2026-10-01 · Novi Most LLC · Texas, United States

This Privacy Policy explains how Novi Most LLC (Novi Most, we, us, or our) handles information in connection with novimost.app and the Novi Most web software. Novi Most is a Texas company based in Houston. The Service is intended for United States business use by adults 18 and older, particularly roofing companies. Customers are subscribing companies; Users are people using the Service for a Customer; End Clients are the Customer's homeowners, property owners, or other clients.

Novi Most decides how it uses information about its website visitors, Customer contacts, and Users for account, business, and service administration. For End Client and job information a Customer submits as Customer Data, the Customer decides why and how to use it; Novi Most processes it for the Customer under the DPA. End Clients should direct data requests to their roofing company. If Novi Most receives a request about Customer Data, it will forward it to the relevant Customer and reasonably assist as described in the DPA.

Depending on how the Service is used, information may include the following categories:

  • Contact and inquiry details, such as name, company, email, phone, crew information, message, form source, and IP address used for inquiry handling and abuse prevention.
  • Account and administration details, such as name, email, username, role, invitation address, password credential data, and sign-in or account-recovery records. Novi Most does not intend to collect or store plain-text passwords.
  • Company settings, such as company name, logo, contact details, rate sheets, estimate terms, permit fees, tax settings, pricing and measurement choices, and other configuration.
  • Customer Data, such as End Client names, phone numbers, email and property addresses; roof measurements and uploaded reports; products, line items, prices, notes, estimate status, and generated estimate documents.
  • Billing status and identifiers, including subscription status, trial and billing dates, transaction status, and Stripe customer identifiers. Card details are entered directly with Stripe; Novi Most does not receive full card numbers through the Service.
  • Security and usage information, which can include IP addresses, sign-in times and failed attempts, browser or device information, session activity, and records of changes made in the Service.
  • Files or estimate links that a User elects to generate or share. A Customer is responsible for choosing the recipient and reviewing the sharing method. Novi Most does not represent that every file or link is protected by recipient authentication; link access and storage boundaries depend on the actual feature and configuration, and a link may be accessible to anyone who possesses it.

Novi Most uses information to operate the Service; administer accounts, invitations, resets, subscriptions, and billing notices; respond to contact, demo, and support inquiries; prevent abuse and investigate security concerns; register message senders where required; troubleshoot and improve the Service; send occasional Novi Most product communications where permitted, with an unsubscribe method; and comply with law and enforce agreements. Customer Data is used to provide the Service for the Customer, including estimate calculations, document generation, sending when a User chooses, security, requested support, and legal compliance.

Novi Most does not sell or rent personal information, use Customer Data for targeted advertising, market to End Clients for Novi Most's own purposes, or use Customer Data to train a general or third-party AI model without separate written Customer opt-in. A local roof report parser processes reports within the Service workflow; Novi Most does not currently send roof reports to an external AI service for parsing. Novi Most may use information aggregated or de-identified so it does not reasonably identify an individual, company, or property to understand and improve the Service.

Novi Most discloses information to service providers only as reasonably necessary for their work on the Service, subject to applicable agreements and the DPA for Customer Personal Data. Current provider roles and categories are set out in the Subprocessors attachment. Replit provides managed hosting, database and object storage, and platform analytics; hosting may involve Service data, while the platform analytics may receive pageview or usage information. Novi Most's own custom event emitter excludes private routes, but Novi Most does not claim that this blocks all platform-level pageview or usage analytics. Stripe processes subscription billing information. Resend delivers email and may receive recipient addresses and message content. Twilio is an optional SMS delivery and carrier-registration provider and receives relevant phone numbers, messages, or business registration details when that function is used. jsDelivr serves public web assets and may receive visitors' IP addresses and browser information when those assets load.

A User may direct an estimate or attachment to an intended recipient, such as an End Client. That disclosure occurs at Customer's direction; Customer must verify the destination and share only with intended recipients. Logos may be used as public brand assets in Customer-created materials. Novi Most does not use End Client contact information for its own advertising.

Novi Most may disclose information to comply with law or valid legal process, protect rights, property, safety, or security, or respond to a suspected violation. In a merger, financing, acquisition, or sale of relevant assets, information may be transferred subject to appropriate protections and this Policy's commitments. Novi Most does not authorize providers to use Customer Personal Data for their own marketing.

A roofing company chooses whether to send text messages and is responsible for recipient consent, message content, and legal compliance. The program is for transactional estimate and job communications, not marketing. Message and data rates may apply; frequency varies; delivery is not guaranteed. Reply STOP to stop texts and HELP for assistance, or contact the roofing company. Where a Customer's provider requires a delivery or registration, relevant information is shared for that purpose only, not marketing. See the SMS Messaging Terms.

Novi Most generally keeps account information and Customer Data while an account is active. After account closure, Customer may request an export for 30 days by emailing admin@novimost.app. Novi Most will make a reasonable effort to handle an export and deletion request manually; it does not represent that export or deletion is automated. Following the export period, Novi Most aims to delete or de-identify Customer Data within 90 days, except data it must retain by law, information needed for legitimate dispute or security purposes, and backup copies that remain until overwritten through their normal schedule. These are operational targets, not a representation of automatic purge or verified deletion of every backup.

Deactivated User and security records may be retained for up to 12 months; billing records may be retained as long as tax, accounting, or legal requirements warrant; demo and contact requests may be retained for up to 24 months unless deletion is requested earlier and retention is not otherwise required. Retention periods may be extended where reasonably necessary for legal compliance, security, or disputes.

A person may email admin@novimost.app to request access to, correction of, or deletion of personal information Novi Most controls, or to unsubscribe from product communications. Novi Most may verify identity and authority and will respond within a reasonable period consistent with applicable law. Applicable legal exceptions may apply. A Customer Admin controls access to Customer accounts and may request User deactivation. Estimates created by a User may remain as Customer Data owned or controlled by the Customer. Requests concerning End Client Customer Data should be made to the roofing company.

Novi Most uses reasonable safeguards designed to protect information, including logical separation of company accounts and role-based access, as described in the Security Overview. Separation is logical within shared managed infrastructure; Novi Most does not promise a physically dedicated database, that no software defect or unauthorized access can occur, or that a breach will never happen. No security measure is absolute.

The web Service may use cookies or similar technologies needed for login, session security, form protection, and settings. The site and Service also have Replit platform analytics for pageview or usage information. Novi Most does not claim that private pageviews are excluded from all platform analytics; its custom event emitter excludes private routes. The public website may load styling or scripts from jsDelivr, which receives connection metadata such as IP address and browser details. No statement here promises that analytics or CDN processing is blocked by a particular browser setting.

The Service is designed for U.S. business use. Providers may process information according to their service locations and applicable provider terms. Before submitting data that requires international transfer terms, specialized regulated-data safeguards, or unsupported high-risk processing, Customer must obtain a separate written agreement confirming appropriate processing arrangements. This Policy does not make a GDPR, international transfer, or specialized-regulated-data compliance guarantee.

The Service is not directed to children under 18. Customers should not submit children's information. If a person believes a child provided information directly to Novi Most, contact admin@novimost.app.

Novi Most may update this Policy. For signed Customers, the version incorporated into the signed Order Form remains the agreed attachment unless amended as the Terms permit; updates may apply prospectively to public use and future orders. Novi Most will provide notice of material changes where required by law.

Privacy contact: Novi Most LLC, admin@novimost.app, Houston, Texas, United States.

Questions about this document? Contact admin@novimost.app.