Privacy Policy
This Privacy Policy describes how Hidden Point Studio, Inc. handles information associated with its websites, Novenect, TokenFlow, customer accounts, software licensing, APIs, connectors, Early Access and beta programs, support, and related products and services.
1. Scope of This Privacy Policy
This Privacy Policy applies to personal information and other information processed by Hidden Point Studio, Inc. (“Hidden Point Studio,” “HPS,” “we,” “us,” or “our”) in connection with:
- Hidden Point Studio websites;
- Novenect and its hosted capabilities;
- TokenFlow and related services;
- account registration and customer portals;
- software licensing, entitlement, activation, and download services;
- APIs, integrations, connectors, agents, and local services;
- support and customer-service interactions;
- Early Access, private beta, developer beta, and other pre-release programs;
- billing, commercial, and subscription relationships; and
- other Hidden Point Studio products or services that reference this Privacy Policy.
A specific product, service, customer agreement, or program may include additional privacy terms.
2. Our Role When Processing Information
Hidden Point Studio may handle information in different capacities depending on the circumstances.
When we collect information for account administration, billing, licensing, support, website operation, security, product improvement, or our own business purposes, Hidden Point Studio generally determines why and how that information is processed.
When a Novenect customer submits or manages information about its own customers, employees, users, assets, systems, or business operations through the platform, HPS may process that information on behalf of the customer and according to the customer’s instructions and applicable agreement.
If you are an individual whose information was entered into Novenect by an HPS customer, that customer may be the organization responsible for responding to requests concerning that data.
3. Information We May Collect
Account and identity information
We may process information such as your name, business email address, organization, role, account identifiers, authentication information, and account status.
Organization and business information
We may process organization names, business contact information, account relationships, subscription information, billing contacts, purchasing details, service selections, and other information related to a business relationship with HPS.
Licensing and entitlement information
Software and services may process information required to validate authorized use, including:
- license identifiers;
- entitlement records;
- activation status;
- assigned organizations;
- device or installation identifiers;
- environment information;
- software version;
- feature access;
- subscription status; and
- relevant usage or limit information.
Usage and service information
Depending on the service, HPS may process operational information about how services are used, including service requests, API calls, feature use, usage counts, credits, limits, allocation consumption, timestamps, status events, and related metadata.
Technical information
We may process technical information such as IP address, browser type, device type, operating system, application version, request identifiers, timestamps, connection status, diagnostic information, server or environment identifiers, and security-relevant events.
Support and communications
If you contact us, we may process your contact information and the contents of your message, support request, issue report, diagnostic material, feedback, or other communication.
Payment and transaction information
We may process transaction information such as order numbers, amounts, payment status, subscription state, refunds, invoices, billing events, and payment-provider references.
Payment card details are generally processed by the applicable payment processor rather than stored directly by Hidden Point Studio.
4. Customer Data Processed Through Novenect
Novenect is designed to support business operations across multiple capabilities. Depending on the capabilities selected by a customer, Novenect may process information relating to the customer’s own:
- customers and organizations;
- users and accounts;
- employees or workforce records;
- purchases and subscriptions;
- licenses and entitlements;
- support interactions;
- usage and metering;
- infrastructure or managed systems;
- assets and assignments;
- workflow, approval, or operational records; and
- other information entered, synchronized, or generated by the customer while using the service.
The specific categories of customer data depend on which Novenect capabilities the customer chooses to deploy and how those capabilities are configured.
5. Local Services and Customer-Controlled Storage
Certain Novenect components, connectors, agents, or local service providers may operate within customer-controlled infrastructure.
Those components may retain information locally where necessary for their documented operation, including configuration, local operational state, synchronization data, cached information, logs, execution evidence, or other authorized records.
Information stored solely in a customer-controlled environment is subject to that customer’s own infrastructure controls, access policies, retention practices, and security responsibilities.
6. Information We Do Not Intentionally Request
Unless a particular service or customer-configured workflow expressly requires it, Hidden Point Studio does not ask customers to provide unnecessary sensitive personal information.
Customers are responsible for determining whether information they enter into Novenect or another HPS service is appropriate for the selected service and lawful for their intended use.
7. How We Use Information
We may use information to:
- provide and operate our products and services;
- create and maintain customer accounts and organizations;
- authenticate users and authorize access;
- validate licenses, subscriptions, entitlements, and activations;
- meter usage and enforce applicable limits;
- process orders, payments, subscriptions, refunds, and related commercial activity;
- provide downloads, releases, deployments, provisioning, and service access;
- operate APIs, integrations, connectors, and platform communications;
- diagnose errors and provide technical support;
- monitor security, detect abuse, investigate suspicious activity, and protect systems;
- maintain operational and audit evidence;
- improve usability, reliability, performance, and product design;
- communicate about service changes, security issues, purchases, account activity, or support;
- manage Early Access and beta programs;
- comply with legal obligations; and
- establish, exercise, or defend legal claims.
8. Legal Bases Where Applicable
Where a law requires us to identify a legal basis for processing, processing may be based on one or more of the following, depending on the circumstances:
- performance of a contract;
- steps requested before entering into a contract;
- compliance with a legal obligation;
- legitimate interests such as operating, securing, supporting, and improving our services;
- consent where consent is the appropriate legal basis; or
- another basis recognized by applicable law.
9. Cookies and Similar Technologies
Hidden Point Studio websites and hosted applications may use cookies, local storage, session storage, or similar technologies where needed for authentication, security, session management, preferences, functionality, analytics, or other documented purposes.
Where required by applicable law, optional technologies may be subject to consent or other user controls.
10. Service Providers and Third Parties
Hidden Point Studio may use third-party service providers to help operate its business and services.
Depending on the service, these may include providers for:
- payment processing;
- hosting and infrastructure;
- cloud computing;
- email and communication delivery;
- monitoring and diagnostics;
- data storage and backups;
- support;
- security; and
- other technical or operational services.
Third-party providers may process information according to their contractual role, applicable terms, and privacy obligations.
11. Payment Processors
Payment transactions may be processed by Stripe or another payment processor identified during checkout.
Payment processors may independently collect payment credentials, billing information, fraud signals, and transaction information necessary to process a transaction.
Their handling of information is also governed by their own terms and privacy policies.
12. When We May Disclose Information
We may disclose information when reasonably necessary to:
- provide a requested service;
- work with contracted service providers;
- complete a business transaction;
- process or investigate payments, refunds, fraud, or disputes;
- protect users, customers, systems, or property;
- investigate misuse or security incidents;
- comply with a lawful legal request, court order, subpoena, or regulatory obligation;
- enforce agreements or protect legal rights; or
- support a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction.
13. We Do Not Sell Personal Information to Advertisers
Hidden Point Studio does not sell customer account information or customer-controlled Novenect data to advertisers for their independent advertising use.
If our practices materially change in a manner that creates additional rights under applicable privacy law, this Privacy Policy and any required controls will be updated accordingly.
14. Security
Hidden Point Studio uses reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse.
Measures may include access controls, authentication, authorization boundaries, encryption where appropriate, monitoring, logging, segmentation, credential controls, backup practices, and other safeguards appropriate to the service.
No information system, network, storage mechanism, or transmission method can be guaranteed to be completely secure.
15. Data Retention
Hidden Point Studio retains information for as long as reasonably necessary for the purposes for which it was collected, subject to contractual requirements, operational needs, legal obligations, security requirements, dispute resolution, fraud prevention, and legitimate business needs.
Different categories of information may have different retention periods.
Customer-controlled information processed through Novenect may also be subject to retention settings, lifecycle controls, or contractual instructions selected by the customer.
16. Account Closure and Deletion
When an account or service is terminated, information may be deleted, anonymized, retained for a limited period, or preserved where necessary for legal, security, billing, backup, dispute, or operational purposes.
Some information may remain in backup systems until the applicable backup lifecycle expires.
17. Your Privacy Rights
Depending on your location and applicable law, you may have rights concerning personal information, which may include the right to:
- request access to personal information;
- request correction of inaccurate information;
- request deletion of certain information;
- request restriction of certain processing;
- object to certain processing;
- request a portable copy of certain information;
- withdraw consent where processing is based on consent; or
- exercise another right provided by applicable privacy law.
These rights are not absolute and may be subject to legal exceptions, identity verification, contractual responsibilities, or other limitations.
18. Requests Concerning Customer-Controlled Data
If your information appears in Novenect because an HPS customer entered, collected, or synchronized it as part of that customer’s own business operations, you should generally direct your privacy request to that customer.
Where appropriate, Hidden Point Studio may assist its customer in responding to a valid request in accordance with applicable agreements and law.
19. International Processing
Hidden Point Studio and its service providers may process information in the United States or other locations where HPS or its providers operate.
Where applicable law requires protections for international data transfers, appropriate contractual or other legally recognized safeguards may be used.
20. Children
Hidden Point Studio’s commercial software and Novenect services are not intended to be used by children to create independent business accounts.
We do not knowingly solicit personal information directly from children through Novenect business-account registration.
If a customer uses a service in a context involving minors, that customer is responsible for determining its legal obligations and configuring its use of the service accordingly.
21. Early Access, Beta, and Preview Programs
Participants in Early Access, Developer Beta, private-beta, or preview programs may provide additional information such as business use cases, testing environments, technical feedback, feature requests, issue reports, reproduction steps, diagnostics, and workflow information.
We may use that information to operate the program, evaluate product behavior, troubleshoot issues, determine participant fit, improve Novenect, and prepare capabilities for broader release.
22. Security and Abuse Information
HPS may retain information reasonably necessary to investigate security incidents, unauthorized access, fraud, attempted abuse, licensing violations, payment disputes, malicious activity, or threats to our services or customers.
Such information may be retained longer than ordinary operational records when reasonably necessary to investigate an incident, protect systems, enforce agreements, or establish or defend legal claims.
23. Automated Processing
Novenect may use automated rules, workflows, validation, detection, reconciliation, health checks, entitlement decisions, alerts, or similar automated processing to operate configured services.
The existence and effect of such processing depends on the capabilities selected and the customer’s configuration.
Hidden Point Studio does not claim that every automated system constitutes automated decision-making with legal or similarly significant effects under privacy law.
24. Changes to This Privacy Policy
Hidden Point Studio may update this Privacy Policy as products, services, infrastructure, technologies, legal requirements, or business practices evolve.
The current published policy will identify its last-updated date.
Where required by applicable law or contract, material changes may also be communicated through account notices, email, product notices, or another appropriate method.
25. Contact and Privacy Requests
Questions about this Privacy Policy or requests concerning personal information may be directed to:
To help us process a privacy request, please identify the relevant account, organization, product, or service when possible.
We may need to verify your identity or authority before fulfilling a request.
26. Related Legal Documents
This Privacy Policy should be read together with other applicable Hidden Point Studio agreements and policies.
