Novo Marketing
Legal

Privacy policy

Updated on 29 August 2026

This policy explains what personal information Novo collects when you use novolink.ai, what we do with it, who we share it with, and the rights you have over it.

Who we are

Novo Solutions B.V. (“Novo”, “we”, “us”) is the data controller for the personal information described in this policy. We are a private limited company registered in the Netherlands, and you can reach us at info@novosolutions.ai.

Novo runs social-media advertising campaigns for estate agents’ property listings and passes the resulting viewing requests back to the agent. This policy covers novolink.ai, including the agent portal at /portal.

Information we collect

We collect the following:

  • When you ask us to market a listing: your name, email address, phone number, and the listing URL you submit.
  • When you create a portal account: your email address and the credentials you set, together with the listing URLs you submit and the status of each one.
  • From the listings you submit: the photographs, descriptions, prices and property details already published on that listing page. We read these to build the advertising creatives.
  • Automatically when you visit: your IP address, browser and device type, the pages you open and how you interact with them.

How we use your information

We use it for these purposes, on these legal bases under the GDPR:

  • To build advertising creatives from your listing and to run and manage the campaigns. Basis: performance of our contract with you.
  • To pass you the viewing requests your campaigns produce, and to answer your enquiries. Basis: performance of our contract with you.
  • To protect the service from abuse, through rate limiting and duplicate detection. Basis: our legitimate interest in keeping the service available.
  • To measure how this website is used, so we can improve it. Basis: our legitimate interest in understanding our own website.

How we share your information

We do not sell your data and we do not share it with other advertisers. We share it only with the providers that run parts of our service, each acting on our instructions:

  • Vercel — website and API hosting
  • Supabase — database and account authentication
  • Resend — transactional email
  • Meta Platforms — delivery of the advertising campaigns you ask us to run
  • Google Analytics and Microsoft Clarity — website measurement
  • Law enforcement or regulators, where the law requires it.

Transfers outside the EEA

Some of these providers are based outside the European Economic Area, or run infrastructure that is. Where personal data leaves the EEA, the transfer is covered by the European Commission’s Standard Contractual Clauses or by an adequacy decision for the country concerned.

Cookies and analytics

We use Google Analytics and Microsoft Clarity to understand how visitors use this site. These services set cookies and record how pages are used, including a replay of the session. They load when you open the site.

You can block these through your browser settings, or with Google’s opt-out add-on. Blocking them does not affect your use of the site or the portal.

Data security

Traffic to and from this site travels over TLS, and data in our database is encrypted at rest. Access to production systems is limited to the people who need it.

IP addresses are never written down in plain form. They are hashed with SHA-256 and a secret salt before being stored, and the hash is used only to enforce rate limits — it cannot be turned back into an address.

How long we keep it

We keep your information for as long as your account is open and for 24 months afterwards, so that a returning client’s campaign history is intact. Enquiry emails are kept for 24 months. Rate-limit hashes are deleted after 30 days. Analytics records follow the retention set by the provider, currently 14 months.

You can ask us to delete your data sooner at any time, and we will unless we are required to keep it.

Your rights

Under the GDPR you have the right to:

  • Ask what personal data we hold about you, and get a copy of it.
  • Have inaccurate data corrected.
  • Have your data deleted.
  • Ask us to restrict how we use it.
  • Receive your data in a portable, machine-readable form.
  • Object to processing we carry out on the basis of legitimate interest.
  • Withdraw consent, where we relied on it, without affecting what came before.

Complaints

Write to us first at info@novosolutions.ai and we will answer within one month. If you are not satisfied, you have the right to complain to your local data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

Changes to this policy

We may update this policy to reflect changes in our services or in the law. The date at the top of this page always shows when it last changed, and we will tell account holders directly about significant changes.

Contact us

Questions about this policy, or about the data we hold, go to info@novosolutions.ai.