This policy explains what personal data M&R Business Solutions Pte Ltd ("we", "us") collects when you use NuvoPanel, why we collect it and what you can ask us to do with it. We handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).
Who we are
NuvoPanel is a product of:
M&R Business Solutions Pte Ltd, 2 Gambas Crescent, #06-30, Nordcom Two, Singapore 757044.
Questions and requests about personal data go to support@nuvopanel.com.
What this policy covers
- the website nuvopanel.com,
- the customer portal portal.nuvopanel.com, where you manage your account and licences,
- the licensing and update service that installed NuvoPanel servers contact.
It does not cover the data on a server that runs NuvoPanel. NuvoPanel is software you install on your own server. Websites, mailboxes, databases and customer records on that server stay on that server; we cannot see them and do not receive copies. The owner of the server decides how that data is used and is responsible for it.
What we collect
When you visit the website or the portal
Our web servers keep standard access logs: IP address, date and time, the page requested, the referring page and the browser's user-agent string. We use them to keep the site running, to investigate errors and to detect abuse.
The website nuvopanel.com sets no cookies, and neither the website nor the portal uses analytics or advertising trackers.
Pages load the Sora typeface from Google Fonts. To deliver the font files, Google receives your IP address and browser details. Google's use of that data is described in Google's own privacy policy.
When you create a portal account
- your e-mail address and, if you give it, your name,
- your password, stored only as a one-way hash,
- sign-in records: the time, the browser's user-agent string, and a count of failed attempts used to lock an account under attack.
The portal sets one essential cookie that keeps you signed in, and stores a small marker in your browser's local storage that remembers whether you were signed in. Neither is used for tracking.
When a server runs NuvoPanel
To start the free trial, activate a licence and check that a licence is still valid, an installed server contacts our licensing service and sends:
- a server fingerprint — a hash that identifies the installation and cannot be turned back into hardware or personal details,
- the server's host name and IP address,
- the installed NuvoPanel version,
- the licence key, once one has been entered.
Servers also download updates from us; those requests appear in our access logs like any other request. We do not receive the names, domains, e-mail addresses or content of the hosting accounts on your server.
When you buy a licence
Payments are handled by Stripe. You enter your card details on Stripe's pages; we never see or store your full card number. Stripe tells us whether a payment succeeded and gives us a customer reference, the subscription status and your invoices. Stripe processes your data under its own privacy policy.
When you write to us
If you e-mail us, we keep the message and your address so we can answer and keep a record of the conversation.
Why we use it
- to create and secure your account,
- to issue licences, start trials and confirm that a licence is valid for a server,
- to take payments, send invoices and keep accounting records,
- to send service messages: e-mail verification, password resets, payment and licence notices,
- to answer support requests,
- to protect the service against misuse and to fix faults,
- to meet legal obligations.
We do not sell personal data and we do not use it for advertising. We send marketing e-mail only if you have asked for it, and every such message has a way to unsubscribe.
Who we share it with
Only the service providers we need in order to run NuvoPanel:
- Stripe, for payments,
- Google Fonts, for the typeface on our pages,
- the hosting provider of the servers the website and portal run on.
We also disclose data when the law requires it, or when it is needed to establish or defend legal claims. If the business is sold or merged, account data may pass to the new owner, who must keep honouring this policy.
Where data is kept
Our servers and service providers may be located outside your country, including outside Singapore. When personal data is transferred overseas we take steps to make sure it receives a standard of protection comparable to the PDPA.
How long we keep it
- Account and licence records: for as long as the account is open, and afterwards for as long as tax and accounting law requires us to keep transaction records.
- Server activation records: for the life of the licence they belong to.
- Access logs: for a limited period, then deleted or rotated out.
- Support e-mail: for as long as it is useful for supporting you.
When data is no longer needed for these purposes we delete it or make it anonymous.
How we protect it
Connections to the website and portal are encrypted. Passwords are stored as hashes, and sign-in is rate-limited and locks after repeated failed attempts. Access to customer data is limited to the people who need it to run the service. No system is perfectly secure; if a breach affects your personal data we will tell you and the authorities as the law requires.
Your choices and rights
You can ask us to:
- tell you what personal data we hold about you and how it has been used,
- correct data that is wrong or out of date,
- stop using your data — you can withdraw consent at any time, although we may then be unable to keep providing the service,
- close your account and delete your data, apart from records the law requires us to keep.
Write to support@nuvopanel.com from the address on your account. We will answer within 30 days. Depending on where you live, you may have further rights under local law, such as the GDPR in the European Economic Area and the United Kingdom, including the right to complain to your data protection authority.
Children
NuvoPanel is a tool for businesses and server administrators. It is not aimed at children, and we do not knowingly collect their data.
Changes to this policy
When we change this policy we publish the new version on this page and update the date below. If a change is significant we will tell account holders by e-mail.
Contact
M&R Business Solutions Pte Ltd, 2 Gambas Crescent, #06-30, Nordcom Two, Singapore 757044 — support@nuvopanel.com