Privacy Policy

Last updated: June 3, 2026

Nuvelo Labs ("we," "us," or "our") is committed to protecting the privacy of visitors to our website and clients who engage our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario's Personal Health Information Protection Act (PHIPA) where we handle personal health information on behalf of clients, and other applicable Canadian privacy laws.

By using our website at nuvelolabs.com, you consent to the practices described in this policy.

1. Who We Are

Nuvelo Labs is a Canadian business based in Kitchener-Waterloo, Ontario. We provide AI assistant setup, workflow automation, lead follow-up, reputation management, and marketing automation services to small and medium-sized businesses in Ontario.

For privacy inquiries, contact us at: hello@nuvelolabs.com

2. Information We Collect

We may collect the following types of personal information:

• Contact information — name, email address, phone number, and business name when you book a call via Calendly, message our website chatbot, or contact us directly
• Chatbot conversations — messages you send to the AI assistant on our website, and any email address you provide to it so we can follow up
• Usage data — pages visited, time spent on site, browser type, device type, and referring URL, collected automatically via analytics
• Communications — content of emails or messages you send to us
• Business information — details about your business that you share during consultations or onboarding

3. How We Use Your Information

We use the information we collect to:

• Respond to inquiries and schedule consultations
• Follow up on leads captured through our website chatbot
• Deliver and improve our AI automation services
• Send service-related communications and updates
• Analyze website usage to improve user experience
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Third-Party Services

We use the following third-party tools which may collect or process your data:

• Calendly — processes booking information when you schedule a call. See Calendly's Privacy Policy
• Cloudflare — provides website hosting, security, and the infrastructure that powers our website chatbot. See Cloudflare's Privacy Policy
• Anthropic — provides the AI language model that powers our website chatbot. Chatbot messages are processed to generate replies. See Anthropic's Privacy Policy
• Zoho Mail — used for business email communications. See Zoho's Privacy Policy

These services are bound by their own privacy policies. We select third-party providers who maintain appropriate data protection standards.

4a. Third-Party AI and Automation Platforms

When delivering services to clients, Nuvelo Labs may configure and integrate third-party AI and automation platforms including but not limited to large language model (LLM) services, SMS and voice platforms, calendar and CRM integrations, and workflow automation tools. These platforms process client business data as required to deliver the contracted services. Each provider operates under their own privacy policy and data processing terms. Specific tools used for each client engagement are disclosed in the client's individual Service Agreement.

Where practical, we anonymize or minimize personal information before it is processed by these AI tools, and we do not permit client data to be used to train third-party AI models. Nuvelo Labs takes reasonable steps to ensure that all third-party platforms used in client engagements maintain appropriate data protection standards consistent with PIPEDA, PHIPA (where applicable), and other applicable Canadian privacy law.

5. Demo Sites

Nuvelo Labs operates interactive demo websites (e.g., nuvelolabs-trades.pages.dev, nuvelolabs-dental.pages.dev) to demonstrate our AI services. These demos may display example business names and contact information for illustrative purposes only. Any business names pre-loaded into demos are fictional examples or publicly available business information used solely to demonstrate the capabilities of our AI systems — they do not imply any business relationship or endorsement. Visitors may interact with demo chatbots; any information entered into demo forms is not stored or used for any purpose.

6. Cookies

Our website uses cookies and similar local-storage technologies to support analytics, remember your light/dark theme preference, and improve your experience. For website analytics we use Google Analytics (GA4) to understand aggregate, de-identified traffic patterns; you can opt out using Google’s Analytics Opt-out Browser Add-on. You can also disable cookies through your browser settings at any time, though this may affect some website functionality.

7. Data Retention & Deletion

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law. You may request deletion of your personal information at any time by emailing hello@nuvelolabs.com. For client engagements, we delete or anonymize your business data — including data held in any connected AI and automation tools — within 30 days of the engagement ending, unless a longer period is required by law or agreed in your Service Agreement.

8. Your Rights Under PIPEDA

Under PIPEDA, you have the right to:

• Know what personal information we hold about you
• Request access to your personal information
• Request correction of inaccurate information
• Withdraw consent for non-essential data processing
• Lodge a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us at hello@nuvelolabs.com. We will respond within 30 days.

9. Data Security

We take reasonable precautions to protect your personal information from unauthorized access, use, or disclosure. Our website is served over HTTPS via Cloudflare's SSL/TLS encryption. However, no method of internet transmission is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.