Privacy Policy

Novel Workplace Solutions Inc., operating as Novel HR ("Novel HR," "we," "us," or "our"), respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use Considered Response or visit related webpages and services (collectively, the "Service").

Considered Response is designed to provide practical guidance for managers and HR professionals when workplace concerns are raised. It is not designed to collect or store employee records, workplace complaints, investigation materials, medical information, or identifiable workplace case information.

1. Who we are

2. Information we collect

We limit the personal information we collect to what is reasonably necessary to provide and operate the Service.

Account information

When you create or maintain an account, we may collect: your name; email address; account and authentication information; subscription information; and communications you send to us regarding your account or support requests.

Payment information

If you purchase a subscription, payment information is processed by Paddle. Novel HR does not directly store complete payment-card information.

Saved workspace information

Considered Response may allow you to save limited information about your progress or workspace, including a name or label you assign to a concern. When naming a concern, do not include employee names or other identifying information. Use a general label such as "Manager Concern," "Team Issue," or "Communication Concern."

Technical and usage information

We may automatically collect limited technical information necessary to operate and secure the Service, such as: IP address; browser and device information; login and session information; dates and times of access; application performance information; and error and security logs.

3. Information you should not enter

Considered Response is intentionally designed to minimize the collection of workplace personal information. Do not enter or upload:

• employee names or other identifying details;
• workplace complaint narratives;
• investigation reports or evidence;
• personnel records;
• disciplinary or performance records;
• medical or diagnostic information;
• accommodation documentation;
• Social Insurance Numbers;
• financial or banking information;
• government identification numbers;
• passwords or security credentials; or
• other confidential employee or workplace information.

4. How we use personal information

We may use personal information to: create, authenticate, and manage user accounts; provide access to Considered Response; administer subscriptions and payments; provide customer support; communicate about account, security, billing, or Service matters; maintain and improve Service functionality; protect the security and integrity of the Service; prevent or investigate misuse or fraud; and comply with applicable legal obligations.

We do not sell personal information.

5. Cookies and similar technologies

Considered Response uses only essential cookies necessary to operate the Service — to keep users signed in, maintain account security, remember user preferences, and support essential Service functionality. No analytics, advertising, or other non-essential cookies are in use. If non-essential cookies are introduced in future, this section will be updated and appropriate consent controls will be added.

6. Service providers

We use third-party service providers to operate parts of the Service. These providers may process personal information on our behalf only as necessary to provide their services to us.

Confirmed material providers:

• Lovable — cloud hosting, database infrastructure, and authentication (US East, Ohio)
• Paddle — payment processing and subscription management (paddle.com/legal/privacy)
• Google Fonts — font delivery (Lexend and Plus Jakarta Sans). When your browser loads the app, a standard request is sent to Google's font servers that includes your IP address and browser information. Google does not store cookies through this request.
• Google Docs — if you click "Make a copy in Google Docs" for the conversation notes template, you leave Considered Response and interact directly with Google under Google's own terms and privacy policy.

7. Where information is processed

Novel HR is a Canadian company. Some service providers we use may process or store account or technical information outside your province or outside Canada. User account and session data is stored on servers located in United States East (Ohio), operated by Lovable, our cloud infrastructure provider. Where personal information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction.

8. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required for legitimate legal, financial, security, or administrative purposes.

Saved workspace information: If a saved workspace item has not been actively used for 30 days, you will receive a prompt to follow up or close the item. Items are not automatically deleted — you remain in control of when they are removed. Users can also delete saved workspace information through the Service.

Account information: Generally retained while your account remains active. After an account is closed, we may retain limited information where necessary for financial records, fraud prevention, dispute resolution, or legal obligations.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, use, or modification. Safeguards may include password-protected accounts, access controls, secure authentication, encryption in transit, restricted administrative access, secure hosting infrastructure, and security logging and monitoring. No internet-based service can guarantee absolute security.

10. Privacy and security incidents

We maintain procedures for responding to privacy and security incidents. Where required by applicable privacy law, we will take appropriate steps to assess, document, report, and provide notice of qualifying privacy breaches. If you believe your account or personal information has been accessed without authorization, contact us at support@novelHR.ca.

11. Access and correction

Depending on the privacy law that applies, you may have the right to request access to personal information we hold about you and to request correction of information that is inaccurate or incomplete. Requests may be sent to support@novelHR.ca. We may need to verify your identity before responding.

12. Your choices

You may be able to: update your account information; delete saved workspace information; close your account; and unsubscribe from optional marketing communications. Some information may need to be retained after account closure where required for legitimate legal, financial, security, or administrative purposes.

13. Marketing communications

If you choose to receive newsletters, product updates, or other promotional communications from Novel HR, we may use your contact information for that purpose. You can unsubscribe from promotional email at any time using the unsubscribe mechanism included in the message.

14. Third-party links and resources

Considered Response may link to Novel HR resources or third-party websites. A third party's handling of personal information is governed by its own privacy practices where that party operates independently from Novel HR.

15. Changes to this Privacy Policy

We may update this Privacy Policy as Considered Response changes, as our service providers change, or as our legal obligations evolve. The effective date at the top identifies the current version. If we make a material change, we will provide appropriate notice and obtain consent where required by applicable law.

16. Privacy accountability

Novel Workplace Solutions Inc. is responsible for personal information under its control. We maintain privacy practices addressing: limiting collection of personal information; identifying appropriate purposes for collection and use; retention and secure disposal; safeguards; service-provider oversight; access and correction requests; privacy inquiries and complaints; and privacy and security incidents.

17. Contact us

We will review privacy questions and complaints and respond in accordance with applicable privacy law. If you are not satisfied with our response, you may also have the right to contact the privacy regulator with jurisdiction over your concern.