Privacy Policy

1. Who We Are and Scope

This Privacy Policy explains how Omevi, LLC, a Florida limited liability company doing business as Ardovia (“Ardovia,” “we,” “our,” or “us”), collects, uses, shares, and protects personal information in connection with our websites, our web and mobile applications, our APIs and connectors, and our related services (collectively, the “Service”).

Ardovia is business software used by contractors, builders, and field-service companies (our “Customers”). We play two different roles:

• As a business in our own right, we decide how to use personal information about website visitors, people who request demos or contact us, and the people who sign up for and manage Ardovia accounts. This policy fully governs that information.
• As a service provider (processor) to our Customers, we store and process the information our Customers and their users put into Ardovia — including information about their own customers, homeowners, leads, vendors, subcontractors, and employees (“Customer Data”). We process Customer Data on our Customer's behalf and under our agreement with them. The Customer's own privacy policy governs how it uses that information. See Section 11.

Our Terms of Service describe our contractual commitments to Customers regarding Customer Data. If there is a conflict between this policy and a Customer agreement regarding Customer Data, the agreement controls.

2. Information We Collect

2.1 Information you give us

• Account and contact information: name, email address, phone number, company name, job title, business address, and profile photo.
• Login and security information: credentials (passwords are handled by our authentication provider and stored only in hashed form), multi-factor authentication settings, and verification codes.
• Billing information: billing contact and address, plan, and payment history. Payment card details are collected and stored by our payment processor, Stripe; we receive only limited details such as card brand, last four digits, and expiration date.
• Communications: messages, support tickets, screenshots, demo requests, survey responses, and feedback you send us, and records of calls with our team.
• Customer Data: the records, files, photos, documents, messages, and other content our Customers and their users enter into the Service (see Section 11).

2.2 Information collected automatically

• Device and log information: IP address, browser and operating system, device type and identifiers, app version, access times, pages and screens viewed, referring URLs, and error and diagnostic logs.
• Usage information: features used, actions taken, and settings chosen within the Service.
• Website analytics: when you visit our public website (not the signed-in Service), Google Analytics collects pages viewed, how you arrived (such as a search engine or ad), approximate location, device and browser type, and whether you requested a demo or started a trial. See Section 8.
• Product usage analytics: when you use the signed-in web app, we record which areas of the Service you open (for example “Jobs › Financials”), with device and browser type and approximate location. We do not record record IDs, page contents, names, email addresses, or any data you or your organization enter. See Section 8.
• Approximate location: general location inferred from IP address.
• Precise location (mobile apps): if you grant location permission, our mobile apps collect your device's precise location — including in the background where you allow it — to power features your employer enables, such as job-site visit tracking, check-in, and mapping. You can change location permissions at any time in your device settings; some features will not work without them.
• Camera, photos, and files: only when you choose to capture or upload them.
• Push notification tokens: if you enable notifications on a device.

2.3 Information from third parties

• Integrations a Customer connects, such as Microsoft 365 (email sending and calendar), accounting software (QuickBooks Online, Bill.com), lead sources (such as Facebook Lead Ads and website forms), review platforms, distributor and supplier systems, telematics providers (vehicle location and status for fleet tracking), and fleet-card providers.
• Service providers, such as our payment processor and fraud- and abuse-prevention providers.
• Your organization, when an administrator creates your account or adds your information.

3. How We Use Information

• To provide, operate, maintain, and support the Service, including features Customers enable;
• To create and manage accounts, authenticate users, and process subscription payments;
• To send transactional messages, such as notifications, verification codes, receipts, and service announcements;
• To respond to support requests and communicate with you;
• To monitor, secure, debug, and improve the Service, and to develop new features;
• To detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms;
• To create aggregated or de-identified data that does not identify any person or Customer;
• To send marketing emails about Ardovia to business contacts, which you can opt out of at any time; and
• To comply with legal obligations and enforce our agreements.

We use Customer Data only to provide the Service to the Customer and as permitted by our agreement with the Customer. We do not use identifiable Customer Data to market to our Customers' own customers.

4. AI Features

Some features use artificial intelligence, such as the in-app assistant and document and price-book import. When you use these features, the relevant information and your prompts are sent to third-party AI model providers (currently Anthropic, OpenAI, and Google) to generate a response. These providers process the information on our behalf under commercial terms that do not permit them to use it to train their models.

We do not use identifiable Customer Data or end-customer personal information to train generally available AI models without the Customer's consent. We may use aggregated or de-identified data to improve the Service, including its AI Features. AI output can be inaccurate and should be reviewed before it is relied on.

5. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral (targeted) advertising. We share personal information only as follows:

• Service providers (sub-processors) who help us operate the Service, under contracts that limit their use of the information to providing services to us. Our principal providers are listed below.
• Within your organization: information in a Customer's account is visible to that Customer's authorized users according to the permissions the Customer sets.
• At a Customer's direction: when a Customer connects an integration or authorizes a connected application (such as an accounting system, distributor, or AI assistant using our connector), we send the information needed for it to work. That provider's own privacy policy then applies.
• To the people our Customers work with: when a Customer sends a proposal, invoice, purchase order, form, or approval request through the Service, the recipient sees the information the Customer chose to include.
• Legal and safety: when we believe in good faith that disclosure is required by law, subpoena, or court order, or is necessary to protect the rights, property, or safety of Ardovia, our Customers, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this policy.
• With your consent or at your direction.

Integrations that a Customer chooses to connect (for example Microsoft 365, QuickBooks Online, Bill.com, telematics, and distributor systems) receive data at the Customer's direction and are not listed as our sub-processors.

6. Text Messages (SMS)

If you opt in to text messages, we use your mobile number and opt-in status only to send the messages you signed up for, as described in our SMS Terms. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. This excludes our SMS delivery provider, which processes numbers only to deliver messages on our behalf. Reply STOP to opt out at any time.

7. Connected Google and Microsoft Accounts

If you connect a Google or Microsoft account to Ardovia (for example, to send email or sync calendars), we access only the data needed for the feature you enabled, use it only to provide that feature, and do not use it for advertising or to train AI models. Ardovia's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect an account at any time in Ardovia or in your Google or Microsoft account settings.

8. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies that are:

• Essential: needed to sign you in, keep your session secure, and make the Service work;
• Preference: used to remember settings such as theme, layout, and filters; and
• Security: used by Google reCAPTCHA on signup and public forms to tell people from bots. reCAPTCHA is subject to Google's Privacy Policy and Terms.
• Analytics: on our public marketing website, we use Google Analytics cookies (such as _ga) to understand how visitors find and use the site and which pages lead to demo requests and trials. In the signed-in web app, a separate Google Analytics property measures which features are used so we can improve the Service: it receives only the type of page (such as “Jobs › Financials”), never page addresses containing record IDs, page titles, names, email addresses, or Customer Data, and it identifies users by a one-way scrambled ID together with their organization's account ID. Google Analytics is not loaded on portal or booking pages, in the mobile apps, or on forms Customers publish. We have turned off Google Signals and ad personalization, so this data is not used for advertising, and Google Analytics does not log or store IP addresses. Google processes this information as described in How Google uses information from sites that use its services. You can opt out with the Google Analytics Opt-out Browser Add-on, by blocking cookies, or by enabling Global Privacy Control in your browser.

We do not use third-party advertising cookies. We honor Global Privacy Control (GPC) signals as a request to opt out of any sale or sharing of personal information. We do not sell or share personal information, and when your browser sends a GPC signal we also turn off Google Analytics. Forms that Customers publish on their own websites may include the Customer's own analytics or tracking code, which is governed by that Customer's privacy policy. You can block or delete cookies in your browser, but essential features may not work.

9. Data Retention

• Account information is kept while the account is active and for as long as needed afterward for billing, tax, legal, and dispute-resolution purposes.
• Customer Data is kept for as long as the Customer's subscription is active, or until the Customer deletes it. After an account ends, the Customer may request an export for 60 days (as described in our Terms), after which we delete Customer Data from active systems within a reasonable period. Copies in backups are overwritten on our regular backup cycle.
• Logs and diagnostics are kept for limited periods for security and troubleshooting.
• De-identified and aggregated data, which does not identify anyone, may be kept indefinitely.
• We may keep information longer where required by law or to resolve disputes and enforce our agreements.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including:

• Encryption of data in transit (TLS) and at rest;
• Role-based permissions and organization-level data separation;
• Optional multi-factor authentication; and
• Hosting with established cloud infrastructure providers.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we confirm a security incident affecting Customer Data, we will notify the affected Customer without undue delay, as described in our Terms, and will provide notices required by law.

11. Homeowners and Other People Our Customers Work With

If you are a homeowner, lead, vendor, subcontractor, or other person who works with a business that uses Ardovia, that business decides what information about you to collect and how to use it. We process that information on the business's behalf. For example, a contractor may use Ardovia to store your contact details, project information, photos, proposals, signed documents, and payment records, or to send you emails and text messages.

To access, correct, or delete that information, or to stop receiving messages from the business, please contact the business directly. If you contact us, we will refer your request to the relevant Customer and support it as required by our agreement and applicable law. Your use of the booking pages, forms, approval links, and portals that businesses send you is governed by our Portal User Terms.

12. Your Privacy Rights

Depending on where you live, you may have the right to:

• Know and access the personal information we hold about you and how we use it;
• Correct inaccurate information;
• Delete your information;
• Obtain a copy of your information in a portable format;
• Opt out of marketing emails (use the unsubscribe link), of any sale or targeted-advertising sharing (we do neither), and of profiling that produces legal or similarly significant effects (we do not do this); and
• Not be discriminated against for exercising your rights.

To make a request, email support@ardovia.com with the subject line “Privacy Request,” or call (844) 747-4949. We will verify your identity by matching information you provide against information we hold, and we may ask for more if needed. You may use an authorized agent; we may require proof of the agent's authority and that you verify your identity directly. We respond within 45 days, and may extend that by 45 more days where permitted, in which case we will tell you why.

Appeals. If we decline your request, you may appeal by replying to our decision with the subject line “Privacy Appeal.” We will respond within the time required by your state's law. If you are not satisfied, you may contact your state attorney general.

If your request concerns information a business put into Ardovia about you, please see Section 11.

13. Additional Information for U.S. State Residents

This section supplements this policy for residents of California and other U.S. states with comprehensive privacy laws. In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described in Sections 2 and 3, and disclosed each category for business purposes to the service providers described in Section 5:

• Identifiers (name, email, phone, IP address, device identifiers);
• Customer records (contact, billing, and business information);
• Commercial information (plans purchased and payment history);
• Internet or other electronic network activity (usage and log data);
• Geolocation data (approximate location, and precise device location where you grant permission);
• Audio, electronic, and visual information (photos, files, and support-call records);
• Professional or employment-related information (employer, job title, role); and
• Inferences drawn from usage (such as feature preferences).

Sensitive personal information. We collect account login credentials and, where you allow it, precise geolocation. We use them only to provide the Service, secure accounts, and as otherwise permitted by law — not to infer characteristics about you — so the right to limit their use does not apply.

No sale or sharing. We have not sold or shared (for cross-context behavioral advertising) personal information in the past 12 months, and we have no actual knowledge of selling or sharing the information of anyone under 16.

California “Shine the Light.” We do not disclose personal information to third parties for their own direct-marketing purposes.

14. Children

The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children under 13 (or under 16 where state law sets a higher age). If you believe a child has provided us personal information, contact us and we will delete it.

15. Location of Processing

Ardovia is based in the United States, and we store and process information in the United States. If you use the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction.

16. Changes to This Policy

We may update this policy from time to time. We will post the updated version here with a new “Last updated” date and version number. If we make material changes, we will notify account owners by email or in the Service before the changes take effect.

17. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Legal Entity: Omevi, LLC (d/b/a Ardovia)
• Email: support@ardovia.com (subject: “Privacy”)
• Phone: (844) 747-4949
• Address: 220 W Garden St, Ste 505, Pensacola, FL 32502