Aranova Labs Inc. ("Aranova," "we," "us," or "our")
Effective date: June 26, 2026
Last updated: July 26, 2026
Aranova Labs Inc. is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit aranova.io (the "Site"), contact us, or use our services. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
By using the Site or providing us with personal information, you consent to the practices described in this policy.
1. Who we are
Aranova Labs Inc. is a digital marketing agency offering website development, SEO, advertising management, and business automation services to clients across Canada and the United States. Our registered office is located at 169 Redwater Drive, Etobicoke, Ontario, M9W 2A5, Canada.
2. Information we collect
We collect personal information that you provide directly and information gathered automatically when you interact with the Site.
Information you provide to us, for example when you book a strategy call, complete a contact or intake form, subscribe to communications, or engage our services. This may include your name, email address, phone number, business name, website URL, and any details you choose to share about your business or marketing goals.
Information collected automatically when you use the Site, including your IP address, browser type and version, device information, pages viewed, referring URLs, and the dates and times of your visits. We collect this information through cookies and similar technologies (see Section 10).
Information from third parties, such as analytics and advertising platforms, our service providers, and publicly available business sources, which we may combine with information we already hold about you.
Google Calendar and Google account information, when you connect a Google account to our booking feature. This is limited to calendar free/busy blocks, the appointment events our booking feature creates, calendar names, and your Google account email and ID, as described in Section 7.
We do not knowingly collect sensitive personal information (such as health, financial account, or government identifier data) through the Site, and we ask that you not submit such information to us unless specifically requested as part of a service engagement.
3. How we use your information
We use personal information to:
- respond to your inquiries and provide the services you request;
- schedule and conduct strategy calls and consultations;
- show accurate booking availability and place appointments on a connected Google Calendar;
- deliver, manage, and improve our website development, SEO, advertising, and automation services;
- operate, maintain, secure, and improve the Site;
- send you service-related communications, and (with your consent) marketing communications you may opt out of at any time;
- analyze usage and measure the performance of our marketing efforts; and
- comply with our legal and regulatory obligations.
4. Consent
Under PIPEDA, we collect, use, and disclose personal information only with your knowledge and consent, except where permitted or required by law. Consent may be express (for example, when you submit a form) or implied (for example, when you provide information reasonably necessary to deliver a service you requested). You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us using the details in Section 14. Withdrawing consent may limit our ability to provide certain services.
5. How we disclose your information
We do not sell your personal information. We may disclose personal information in the following circumstances:
Service providers. We share information with third-party vendors who perform services on our behalf, such as hosting, analytics, advertising platforms, customer relationship management, scheduling, email delivery, and payment processing. These providers are authorized to use personal information only as necessary to provide services to us.
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections.
Legal requirements. We may disclose information where required to comply with applicable law, a subpoena, court order, or other legal process, or to protect the rights, property, or safety of Aranova, our clients, or others.
6. SMS / text messaging
If you opt in to receive text messages from us — for example through our SMS opt-in page, a form on the Site, or a service engagement — we collect and use your mobile phone number and opt-in records to send you the messages described in the SMS section of our Terms and Conditions, such as appointment reminders and booking updates, review requests and special offers sent on behalf of the business you visited, and service or account messages. Transactional and marketing texts are separate opt-ins: subscribing to one does not subscribe you to the other.
We will not share or sell your mobile information with third parties for promotional or marketing purposes. Mobile opt-in and consent data are not shared with any third parties.
Message frequency varies, and message and data rates may apply. You can opt out at any time by replying STOP to any message, and get help by replying HELP or by contacting us at ritesh@aranova.io.
7. Google Calendar data
When you connect a Google account to our booking feature, we access and use Google user data only as described in this section.
What we access
- calendar.freebusy: Busy and free time blocks only. We never read event titles, descriptions, attendees, or any other event contents.
- calendar.events.owned: We create, update, and delete only the appointment events that our booking feature creates. We do not read or modify your other events.
- calendar.calendarlist.readonly: The names of your calendars, so you can choose which calendar receives bookings.
- openid, email, and profile: Your Google account email and ID, so we can identify the connection and detect if a different Google account reconnects.
Why we use it
We use this data to show accurate availability on our client's website and place bookings on the connected calendar. We do not use it for any other purpose.
What we store
We store an encrypted Google refresh token; the selected calendar's ID and name; the connected Google account email and ID; and, for each booking we create, its scheduled time, the customer's name, email address, and phone number, and our own event identifier. Free/busy results are used to calculate availability and are not retained as calendar-event records. We do not store any of your other calendar events or event contents.
Sharing and human access
We do not sell or transfer Google Calendar data to third parties, use it for advertising, or use it to train generalized artificial intelligence or machine learning models. No person at Aranova reads or manually accesses this data unless you explicitly ask us to do so for support, access is necessary for security purposes, or access is required by law.
Google API Services User Data Policy
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Retention, disconnection, and deletion
We retain the Google refresh token and connected-account details only while the Google Calendar connection remains active and the booking feature is in use. You can disconnect the connection at any time through Google Account permissions or by asking us at ritesh@aranova.io. When the connection is disconnected, we delete the stored Google refresh token. We delete the selected calendar details and connected-account identifiers when they are no longer needed to complete the disconnection or protect the security of the account.
Appointment events already created by the booking feature remain on your Google Calendar after disconnection. Because the refresh token has been deleted, we can no longer update or delete those events. Our booking records are not automatically deleted when you disconnect Google Calendar. We retain them only while needed to provide the booking service and meet applicable legal, accounting, or reporting requirements, after which we securely delete or anonymize them. You may request deletion of your Google connection data or booking records at ritesh@aranova.io, subject to any records we are required by law to retain.
8. Cross-border transfers
Some of our service providers are located in, or store data in, the United States and other countries. As a result, your personal information may be processed and stored outside of Canada, where it may be accessible to courts, law enforcement, and regulatory authorities under the laws of those jurisdictions. We take reasonable steps to ensure that service providers handling your information provide a comparable level of protection.
9. Retention
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to provide our services, and to meet legal, accounting, or reporting requirements. When personal information is no longer required, we securely delete or anonymize it.
10. Cookies and analytics
The Site uses cookies and similar technologies to operate the Site, remember your preferences, analyze traffic, and measure advertising performance. We may use analytics and advertising tools such as Google Analytics and Meta (Facebook) Pixel, which set their own cookies and collect usage data subject to their respective privacy policies. You can control cookies through your browser settings; disabling cookies may affect some Site functionality.
11. Third-party links
The Site may contain links to third-party websites and services that we do not operate or control. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
12. Your rights
Subject to applicable law, you have the right to:
- access the personal information we hold about you and request information about how it has been used and disclosed;
- correct personal information that is inaccurate or incomplete;
- withdraw consent to our collection, use, or disclosure of your personal information; and
- make a complaint about our handling of your personal information.
To exercise any of these rights, contact us using the details in Section 14. We will respond within the timeframes required by PIPEDA. We may need to verify your identity before fulfilling a request.
13. Safeguards
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. While we take these measures seriously, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
14. Contact us and complaints
If you have questions, requests, or complaints regarding this Privacy Policy or our handling of your personal information, please contact our Privacy Officer:
Aranova Labs Inc.
Email: ritesh@aranova.io
169 Redwater Drive, Etobicoke, Ontario, M9W 2A5, Canada
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or 1-800-282-1376.
15. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be posted on this page, and your continued use of the Site after changes are posted constitutes acceptance of the revised policy.