Privacy Policy

Nowly plays two different roles, and it matters which one applies:

• For your Nowly account: the data you give us to register and run the platform (your email, business details, billing). Nowly is the controller.
• For your end customers' booking data: the details people enter when booking through your mini-app. The business owner is the controller and Nowly is the processor, handling that data on the owner's instructions to run the mini-app. Owners are responsible for their own privacy notice to their customers.

• Account & business data: name, email, password (stored hashed by our authentication provider), business name and details, and your mini-app configuration.
• Billing data: plan and payment status. Card details are handled by our payment processor; Nowly does not store full card numbers.
• Technical & usage data: including IP address, device and browser information, and online identifiers. We treat these as personal data.
• Booking data (as processor): the information end customers submit through a mini-app (e.g. name, contact details, chosen service and time), held on the owner's behalf.
• Cookies & similar technologies: see section 5.

You are not legally required to give us personal data, but without the data needed to create and run your account we cannot provide the service. We use the data for the purposes in section 4 and share it only with the recipients in section 6.

We use personal data to:

• create and secure your account and provide the service (basis: performance of our contract with you);
• process payments and manage subscriptions (basis: contract / legal obligation);
• communicate with you about the service and support requests (basis: contract / legitimate interest);
• keep the service secure and prevent abuse (basis: legitimate interest / legal obligation);
• with your consent, measure how the platform is used so we can improve it (basis: consent, see section 5).

Nowly uses essential cookies that are needed to log you in and keep the app working. These do not require consent. On the Nowly platform we also use analytics cookies (Google Analytics 4) to understand how the builder is used, but only after you opt in. Nothing analytics-related loads until you choose “Accept”, and you can withdraw consent at any time from your profile's Manage cookies menu. Withdrawing is as easy as granting.

The mini-apps your customers visit do not run Nowly's analytics at all. We do not track your end customers on your behalf.

We do not sell personal data. We share it only with service providers that help us run Nowly, under agreements that limit their use of it:

• cloud hosting and application delivery;
• authentication and database (our booking and account data store);
• a payment processor for subscriptions;
• an analytics provider (Google Analytics 4), platform only, and only with your consent.

We may also disclose data where required by law, to enforce our terms, or to protect our rights, our users, or the public. If Nowly is involved in a merger, acquisition, or sale of assets, data may be transferred as part of that transaction, subject to this policy.

We and the providers we use may store and process personal data in different countries, including the United States. Where we transfer personal data across borders, we rely on an appropriate safeguard or lawful transfer mechanism, such as standard contractual clauses or an equivalent measure, so that your data remains protected.

We keep account and business data for as long as your account is active and as needed to provide the service, then for the period required to meet legal, tax, and accounting obligations, after which it is deleted or anonymized. Booking data held as processor is kept according to the owner's instructions. When you delete your account, we delete or anonymize the associated personal data, except where we must retain it to comply with the law.

We use technical and organizational measures appropriate to the data, including access controls, encryption in transit, and tenant isolation, to protect personal data. No system is perfectly secure.

If a security incident affects your personal data, we will notify the relevant supervisory authority and affected individuals where the law requires, without undue delay.

Depending on where you live and the data involved, you may have the right to:

• access: receive a copy of the personal data we hold about you;
• correct: have inaccurate, incomplete, or out-of-date data corrected;
• delete: ask us to erase your personal data;
• restrict or object to certain processing, and request portability of data you gave us;
• opt out of marketing, and withdraw any consent (e.g. analytics) at any time, as easily as you gave it.

Residents of the EU, the UK, and certain other regions may have additional statutory rights; California residents may have rights under the CCPA/CPRA, including to know, delete, and opt out of the “sale” or “sharing” of personal information. Note that we do not sell personal data. We will not discriminate against you for exercising your rights.

To exercise a right, email support@nowly.online. We aim to respond within the time the applicable law requires. If the request concerns booking data your business collected, we may refer you to that business as the controller, or act on its instructions.

Nowly is a tool for businesses and is not directed to children. We do not knowingly collect personal data from children under 16 through the platform. Where a mini-app may be used by minors, the business owner is responsible for obtaining any parental consent the law requires.

We will send you marketing messages only where the law allows it or where you have opted in, and every message will offer a simple way to opt out. We do not pre-tick marketing consent.

If you have a concern we could not resolve, you can contact your local data-protection or privacy authority. If you are in the EU or the UK, that is your national supervisory authority.

We may update this policy and will change the “last updated” date above; we will give notice of material changes. The controller of your account data is Nowly. Contact us about privacy at support@nowly.online.