Last Updated: May 31, 2025

At RapiNova LLC, we are deeply committed to safeguarding your privacy and ensuring that your personal data is handled in a manner that complies with the General Data Protection Regulation (GDPR) and other applicable laws. As a U.S.-based software house with a global reach, we understand the importance of transparency, security, and user control when it comes to your data. This Privacy Policy explains how we collect, use, and protect your information, as well as your rights and how you can exercise them.

1. Scope of This Policy
This Privacy Policy applies to all personal data collected through our website, products, and services (collectively, the "Services"), such as RapiNova Accounts (RNAccounts.com), RapiNova Hospital Management System (RNHMS.com), and WaSMS.net, as well as custom development projects like software and website development. It covers data collected directly from you, automatically via cookies, or through third-party providers.

2. Data We Collect
We collect personal data in the following ways:

• Information You Provide: When you sign up for a subscription plan, contact us for support, or request a custom development quote, we may collect your name, email address, phone number, payment details, and project requirements.
• Automatically Collected Data: We use cookies and similar technologies to collect data such as your IP address, browser type, device information, and browsing behavior to enhance your experience and analyze site performance.
• Third-Party Data: We may receive data from third-party analytics providers (e.g., Google Analytics) or payment processors to better understand user behavior and process transactions securely.

3. How We Use Your Data
We use your data to provide and improve our Services, including:

• Delivering access to our digital products and fulfilling custom development projects.
• Personalizing your experience, such as tailoring content or recommendations based on your preferences.
• Analyzing site usage to optimize performance, improve user experience, and develop new features.
• Processing payments and managing subscriptions for plans like NovaLite, NovaPro, and NovaElite.
• Communicating with you, including responding to inquiries, sending service updates, or notifying you of policy changes.
• Ensuring the security of our Services by detecting and preventing fraud or unauthorized access.

4. Legal Basis for Data Processing
We process your personal data based on one or more lawful bases under GDPR:

• Consent: For example, when you accept cookies for personalization or analytics.
• Contractual Necessity: To fulfill our obligations under subscription plans or custom development agreements.
• Legitimate Interests: To improve our Services, enhance security, or analyze user trends, provided these interests do not override your rights.
• Legal Obligations: To comply with applicable laws, such as retaining payment records for tax purposes.

5. Your Privacy Rights
Under GDPR and other applicable laws, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data, subject to legal exceptions.
• Right to Restrict Processing: Limit how we process your data under certain conditions.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing for purposes like direct marketing.
• Right to Withdraw Consent: Withdraw consent for non-essential data processing (e.g., cookies) at any time.

To exercise these rights, contact us at [email protected]. We will respond within 30 days, as required by GDPR.

6. Data Storage and Security
We store your data securely on GDPR-compliant servers with encryption and access controls to prevent unauthorized access, loss, or misuse. Data retention periods vary:

• Cookie data is retained for up to 12 months.
• Subscription data is kept for the duration of your plan plus a reasonable period for compliance purposes.
• Custom project data (e.g., project requirements) is retained for 5 years after project completion, unless otherwise agreed.

We implement robust security measures, including SSL/TLS encryption, regular security audits, and compliance with industry standards like ISO 27001. In the event of a data breach, we will notify affected users and authorities within 72 hours, as required by GDPR.

7. Sharing and Transfer of Data
We do not sell your personal data. We may share your data in these cases:

• Service Providers: With trusted third parties (e.g., payment processors, analytics providers) who are contractually obligated to comply with GDPR.
• Legal Requirements: To comply with legal obligations, such as responding to court orders.
• International Transfers: Data may be transferred outside the EEA (e.g., to U.S. servers). We use Standard Contractual Clauses (SCCs) to ensure GDPR compliance.

8. Third-Party Links and Services
Our website may contain links to third-party sites or services (e.g., payment gateways). We are not responsible for their privacy practices. We encourage you to review their policies before providing personal information.

9. Children’s Privacy
Our Services are not intended for users under 18 years of age. We do not knowingly collect data from children. If we become aware that a child has provided us with personal data, we will take steps to delete it promptly.

10. Contact Us for Privacy Concerns
If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer:

• Email: [email protected]
• Phone: +1 (307) 999-4679
• Address: RapiNova LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States

If you are not satisfied with our response, you may lodge a complaint with a supervisory authority, such as the Information Commissioner’s Office (ICO) in the UK or another EU data protection authority.

11. Updates to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via email or a website notice. The updated policy takes effect upon posting, with the last update date noted above.