JARVIS – Privacy Policy
JARVIS – PRIVACY POLICY
Effective Date: September 9, 2026
This Privacy Policy explains how JARVIS, an internal artificial intelligence assistant operated by Novera Construction inc. ("Novera", "we", "us", or "our"), accesses, uses, processes, and protects information when connected to authorized business systems.
This policy applies to information processed through JARVIS and its authorized integrations.
1. PURPOSE
JARVIS is designed to assist with authorized business operations such as:
- accounting analysis;
- customer and supplier administration;
- email review and summarization;
- project coordination;
- document analysis;
- operational planning;
- business reporting; and
- other internal administrative functions.
2. INFORMATION JARVIS MAY PROCESS
Depending on the services authorized by Novera, JARVIS may process business information including:
- customer names and contact information;
- supplier and vendor information;
- invoices;
- invoice balances;
- payments;
- bills and expenses;
- transaction dates;
- accounting records;
- project information;
- business communications;
- email content;
- document content;
- internal business notes; and
- information necessary to identify and operate authorized third-party connections.
JARVIS only accesses categories of information that are available through services that have been expressly connected and authorized.
3. QUICKBOOKS ONLINE DATA
When QuickBooks Online is connected to JARVIS, access is authorized through Intuit's OAuth authorization process.
Depending on the authorized QuickBooks data and the functionality enabled, JARVIS may process information such as:
- company information;
- customers;
- invoices;
- invoice balances;
- payment records;
- vendors;
- bills; and
- related accounting information.
The current QuickBooks integration used by JARVIS is designed to operate in read-only mode.
JARVIS does not currently use this integration to create, edit, delete, or execute QuickBooks accounting transactions.
4. HOW INFORMATION IS USED
Information accessed through JARVIS may be used to:
- answer authorized business questions;
- locate business records;
- summarize accounting or operational information;
- identify unpaid or outstanding invoices;
- analyze business activity;
- assist with customer and supplier follow-up;
- prepare drafts or internal recommendations;
- coordinate information across authorized business systems; and
- improve internal business workflows.
Information is not accessed for unrelated advertising or marketing purposes.
5. ARTIFICIAL INTELLIGENCE PROCESSING
JARVIS uses artificial intelligence services to process certain authorized requests.
When necessary to perform a requested task, relevant business information may be transmitted to AI service providers used to operate JARVIS, including OpenAI or other service providers configured by Novera.
Only information reasonably required to perform the requested function should be provided to such services.
JARVIS is designed to avoid unnecessarily exposing authentication credentials, access tokens, refresh tokens, client secrets, or other sensitive technical credentials to AI models.
6. OAUTH CREDENTIALS AND TOKENS
Third-party service credentials and OAuth tokens are treated as confidential technical information.
QuickBooks OAuth tokens used by the current JARVIS implementation are stored locally in a restricted-access token store.
Access to the local token store is limited through operating-system file permissions.
OAuth tokens are not intentionally included in normal AI prompts, user-facing responses, logs, or business reports.
Tokens may be refreshed automatically when required by the connected service.
7. DATA SHARING
Novera does not sell JARVIS business data or connected QuickBooks data to advertisers.
Information may be processed by service providers when necessary to operate JARVIS, including:
- cloud or infrastructure providers;
- artificial intelligence providers;
- authentication providers; and
- connected business software providers.
Such processing is limited to the purposes required to provide the applicable service or JARVIS functionality.
8. DATA ACCESS AND INTERNAL SEPARATION
JARVIS is designed to separate business environments and route requests only to authorized company systems.
Access controls may include:
- company-level isolation;
- connector permissions;
- runtime enable/disable controls;
- specialized agents;
- access gates;
- approval requirements; and
- audit records.
These controls are intended to reduce unauthorized or unintended access between connected systems.
9. DATA RETENTION
Business information may remain available within its original connected system according to that provider's retention rules.
JARVIS may also maintain limited local operational information, such as:
- conversation history;
- application configuration;
- audit information; and
- authentication token state.
Retention may vary according to operational, security, legal, or accounting requirements.
Information that is no longer required may be deleted or disconnected where technically and legally appropriate.
10. DISCONNECTING QUICKBOOKS
Authorization for JARVIS to access QuickBooks Online may be revoked.
When the QuickBooks connection is revoked, JARVIS will no longer be able to obtain new QuickBooks data through that authorization.
Locally stored OAuth credentials associated with the disconnected account should also be removed or invalidated as part of the disconnection process.
Disconnecting JARVIS does not itself delete accounting information stored inside QuickBooks Online.
11. SECURITY
Novera uses reasonable administrative and technical measures intended to protect information handled by JARVIS.
These measures may include:
- restricted credentials;
- OAuth authorization;
- local access controls;
- connector isolation;
- read-only integrations where appropriate;
- runtime kill switches;
- controlled error handling;
- restricted token storage; and
- auditing of security-sensitive operations.
No computer system or internet transmission can be guaranteed to be completely secure.
12. THIRD-PARTY SERVICES
Third-party services connected to JARVIS operate under their own privacy policies and terms.
These may include Intuit QuickBooks Online, Zoho, OpenAI, and other services authorized in the future.
Novera does not control the independent privacy practices of those providers.
13. YOUR CHOICES
An authorized account administrator may:
- disconnect a supported third-party integration;
- revoke applicable OAuth authorization;
- disable a JARVIS connector;
- restrict JARVIS access to a connected service; or
- request review of information maintained directly by Novera where applicable.
14. CHILDREN
JARVIS is a business operations system and is not intended for use by children or for the collection of children's personal information.
15. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be updated when JARVIS functionality, connected services, or legal requirements change.
The current version will remain available on this page with the effective date shown above.
16. CONTACT
For questions about JARVIS privacy practices, contact:
Novera Construction inc.
Website: https://www.noveraconstruction.com
Email: info@noveraconstruction.com
Quebec, Canada