1. Introduction

This Privacy Policy explains how New Development Consulting Company (شركة التطوير الجديد للاستشارات), operating under the Franovo brand (“Franovo,” “we,” “us,” or “our”), collects, uses, stores, shares and protects personal information.

This Privacy Policy applies to personal information processed through:

• **www.franovo.com**;
• the Franovo software platform;
• Franovo web applications and portals;
• demonstration and trial environments;
• contact and demo forms;
• integrations and connected services;
• customer support;
• related online services.

Franovo is a B2B franchise management software platform used by franchisors, franchisees and multi-location businesses to manage activities such as operations, expansion, audits, compliance, training, documents, analytics and royalty workflows.

This Privacy Policy should be read together with Franovo’s **Terms and Conditions** and, where applicable, a Customer’s Data Processing Agreement with Franovo.

2. Who Is Responsible for Personal Information?

The role Franovo performs depends on the context.

Information Franovo Processes for Its Own Purposes

Franovo may determine the purposes and means of processing information relating to:

• Website visitors;
• prospects;
• demo requests;
• commercial contacts;
• account administration;
• billing contacts;
• security;
• support; and
• Franovo’s own business operations.

In these circumstances, Franovo acts in the role required by applicable data-protection law.

Customer-Controlled Information

Customers may upload or process personal information relating to their:

• employees;
• franchisees;
• managers;
• contractors;
• users;
• applicants;
• suppliers;
• customers; or
• other individuals.

Where Franovo processes that information only to provide Services according to the Customer’s instructions, the Customer generally determines the purposes for which the information is processed and Franovo acts as the Customer’s service provider or processor, as applicable.

Customers are responsible for ensuring they have an appropriate legal basis and have provided any notices required for information they submit to Franovo.

3. Information We May Collect

The information processed by Franovo depends on how the Services are used.

3.1 Contact and Demo Information

When you contact Franovo, request information or request a demonstration, we may collect information such as:

• full name;
• work email;
• phone or mobile number;
• company name;
• company website;
• country or region;
• franchise or network information;
• number of locations or network size;
• job title or role;
• information provided in free-text fields; and
• communications with Franovo.

4. Account and Profile Information

Where you create or use a Franovo account, we may process:

• name;
• email address;
• organization;
• job title or role;
• assigned location;
• account role;
• permissions;
• profile information;
• account status;
• authentication information; and
• preferences.

Passwords or equivalent authentication credentials are processed in accordance with the platform’s security architecture and are not intended to be made available in readable form to other users.

5. Organization and Franchise Information

Franovo may process information about a Customer’s business and network, including:

• organization details;
• franchise locations;
• branch or unit information;
• franchisee information;
• regions;
• teams;
• managers;
• operating structures; and
• relationships between organizations, locations and users.

Some of this information may constitute personal data where it identifies or relates to a natural person.

6. Operational Information

Customers may use Franovo to process operational information such as:

• tasks;
• assignments;
• completion records;
• workflows;
• operating procedures;
• brand standards;
• comments;
• notes;
• approvals;
• deadlines;
• corrective actions;
• location information; and
• operational reports.

7. Audit, Inspection and Compliance Information

Where Customers use audit, inspection or compliance functionality, Franovo may process:

• audit responses;
• inspection responses;
• scores;
• findings;
• compliance statuses;
• corrective actions;
• supporting evidence;
• comments;
• photographs;
• files;
• timestamps;
• location information where supplied;
• responsible user information; and
• related records.

Customers determine how these tools are used within their organization.

8. Training and Knowledge Information

Where training or knowledge features are used, information may include:

• training assignments;
• course progress;
• completion status;
• assessment responses;
• scores;
• acknowledgements;
• completion dates;
• assigned materials; and
• related user records.

Such information may be visible to authorized managers or administrators within the Customer’s environment.

9. Documents and Uploaded Content

Users may upload information including:

• operating manuals;
• policies;
• procedures;
• training materials;
• images;
• audit evidence;
• spreadsheets;
• business documents;
• reports;
• attachments; and
• other files.

Uploaded information may contain personal information depending on what the Customer chooses to upload.

Customers should not upload personal or sensitive information unless they have an appropriate reason and authority to do so.

10. Financial, Revenue and Royalty Information

Where Customers use financial or royalty-related features, Franovo may process business information such as:

• revenue;
• sales values;
• royalty percentages;
• royalty calculations;
• franchise fees;
• payment status;
• deductions;
• reconciliation information; and
• reports.

Business-level financial information is not necessarily personal information.

However, where financial information can identify or relate to a natural person, it may be treated as personal data or sensitive personal data under applicable law.

11. Analytics and Derived Information

Franovo may generate information derived from data processed through the Services, such as:

• performance metrics;
• scores;
• trends;
• comparisons;
• summaries;
• dashboards;
• statistical information; and
• operational analytics.

Where derived information relates to an identifiable individual, it will be treated as personal information where required by applicable law.

12. Technical and Usage Information

When users access Franovo, we may process technical information reasonably necessary to operate, protect and improve the Services, which may include:

• IP address;
• browser type;
• device information;
• operating system;
• session information;
• login timestamps;
• access timestamps;
• account actions;
• error information;
• security events;
• activity records;
• pages or functionality accessed; and
• similar technical information.

This information may be used for security, troubleshooting, support, fraud prevention and platform operation.

13. Communications and Notifications

Franovo may process contact information and communication records in order to provide:

• account notifications;
• invitations;
• reminders;
• audit alerts;
• task notifications;
• training notifications;
• service messages;
• billing communications;
• security messages;
• support communications; and
• other operational communications.

Transactional and service communications are separate from optional marketing communications.

14. Information From Integrations

If a user or Customer connects a third-party service to Franovo, Franovo may receive or transmit information necessary to provide the requested integration.

The information processed depends on:

• the provider;
• permissions authorized by the user;
• the features enabled;
• the Customer’s configuration; and
• the purpose of the integration.

Franovo seeks to limit integration access to information reasonably necessary for the requested functionality.

15. Google API and Google Calendar Information

Franovo may allow users to connect Google services, including Google Calendar.

Where a user chooses to connect a Google account:

• access is initiated by the user;
• the permissions requested are displayed during the Google authorization process;
• Franovo accesses Google user information only as reasonably necessary to provide the connected user-facing feature;
• Franovo does not use Google user information for unrelated advertising purposes;
• Franovo does not sell Google user information;
• users may revoke access through available Franovo or Google account controls.

Depending on the specific functionality enabled, Franovo may process Google account or calendar information required to provide the requested integration.

The exact permissions requested are determined by the implementation and are presented to the user through the Google authorization flow.

Franovo’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including applicable Limited Use requirements.

Franovo will not use Google user data for purposes materially different from those disclosed to the user without obtaining any additional consent required by Google policies or applicable law.

Where Google-derived information is stored by Franovo, it is retained only for as long as reasonably necessary for the applicable feature, contractual requirements, security needs or legal obligations.

Users may disconnect the Google integration. Following disconnection, Franovo will cease new access through the revoked authorization, subject to technical processing already in progress and applicable retention requirements.

16. Cookies and Similar Technologies

Franovo may use cookies and similar technologies.

These may include:

Necessary Cookies

Used for functionality such as:

• authentication;
• session management;
• security;
• load balancing; and
• maintaining user preferences essential to the Services.

Preference Cookies

Used to remember choices such as language or interface preferences.

Analytics Cookies

Where enabled, analytics technologies may help Franovo understand Website or Service usage and improve performance.

Marketing Technologies

Where used, non-essential marketing technologies will be handled in accordance with applicable consent requirements.

Additional information may be provided in Franovo’s Cookie Policy or cookie-management interface.

17. How We Use Personal Information

Franovo may process personal information for purposes including:

• providing the Services;
• creating and managing accounts;
• authenticating users;
• managing permissions;
• providing demonstrations and trials;
• providing Customer-requested functionality;
• processing Customer Content;
• providing analytics and reporting;
• operating integrations;
• providing support;
• maintaining security;
• detecting fraud or misuse;
• troubleshooting;
• improving reliability and usability;
• administering subscriptions;
• invoicing;
• communicating with Customers and users;
• maintaining legal and business records;
• responding to legal requests; and
• complying with applicable law.

We do not process personal information for materially incompatible purposes unless permitted by law and, where required, appropriate notice or consent is provided.

18. Legal Grounds for Processing

The legal basis for processing depends on the information, purpose and applicable law.

Franovo may process personal information where:

• the individual has provided consent;
• processing is required to provide contracted Services;
• processing is necessary to fulfill obligations or rights under an agreement;
• processing is required by law;
• processing is necessary to protect security or legal rights;
• processing is necessary for legitimate business purposes where permitted by applicable law; or
• another lawful basis applies.

Where applicable law requires consent for particular processing, Franovo or the relevant Customer will obtain consent before that processing.

19. Customer Instructions

Where Franovo processes personal information on behalf of a Customer, Franovo generally processes that information according to:

• the Customer’s instructions;
• the applicable agreement;
• the configuration of the Services; and
• applicable law.

Requests concerning personal information controlled by a Customer may need to be directed to that Customer.

Franovo may assist Customers with lawful data-subject requests where required.

20. Visibility to Franchisors, Employers and Administrators

Franovo is an organization-managed platform.

If your account is associated with a franchisor, franchisee, employer, headquarters team or other Customer, authorized administrators within that organization may be able to access information associated with your account or activities.

Depending on features and permissions, this may include:

• profile information;
• tasks;
• completion records;
• audits;
• inspections;
• corrective actions;
• training progress;
• assessment information;
• comments;
• uploaded files;
• performance information;
• operational reports; and
• other workspace activity.

Franovo does not control the Customer’s internal employment, franchise or monitoring decisions.

Customers are responsible for ensuring appropriate notices and legal grounds exist for their use of Franovo to manage information relating to their users.

21. AI and Automated Processing

Franovo may provide automated or AI-assisted features.

These may process Customer Content in order to provide functions such as:

• summaries;
• recommendations;
• classification;
• analysis;
• prioritization;
• generated drafts; or
• workflow assistance.

AI-generated output may be inaccurate and should be reviewed by an appropriate person.

No Training on Customer Content

Franovo does not use Customer Content, Confidential Information or personal information submitted through the Services to train generalized artificial intelligence or machine-learning models.

Franovo does not authorize third-party AI providers acting on its behalf to use such Customer Content for generalized model training.

Customer data may be processed by an AI service only where reasonably necessary to provide an enabled Franovo feature and subject to appropriate contractual, privacy and security requirements.

22. Who We May Share Information With

Franovo may disclose information only where reasonably necessary and permitted by law.

Recipients may include:

Service Providers

Companies that assist Franovo with:

• infrastructure;
• hosting;
• security;
• authentication;
• email;
• communications;
• technical support;
• analytics;
• payments;
• integrations; or
• other supporting services.

Service providers are expected to process information only for authorized purposes and subject to appropriate obligations.

Customer Organizations

Personal information may be made available to authorized users, administrators, managers or other users within the Customer environment according to configured permissions.

Connected Third-Party Services

Where a Customer enables an integration, information may be sent to or received from the relevant provider as necessary to provide the integration.

Legal and Regulatory Authorities

Information may be disclosed where reasonably necessary to:

• comply with law;
• respond to valid legal process;
• protect rights;
• prevent fraud;
• investigate security incidents; or
• protect users or the public.

Corporate Transactions

Information may be disclosed as reasonably necessary in connection with a merger, acquisition, financing, reorganization or sale of business assets, subject to applicable legal requirements.

23. International Data Transfers

Franovo may use service providers or infrastructure that involves processing information in more than one country.

Where personal information is transferred across borders, Franovo will seek to apply measures required by applicable law.

These may include:

• assessing the level of protection provided by the recipient;
• contractual safeguards;
• access restrictions;
• data minimization;
• technical and organizational security measures; and
• other legally recognized transfer mechanisms.

Where Saudi personal data is transferred outside the Kingdom of Saudi Arabia, applicable Saudi Personal Data Protection Law and transfer requirements will be considered to the extent they apply.

Where Jordanian personal data is transferred outside Jordan, Franovo will address applicable requirements under Jordanian data-protection law.

24. Data Security

Franovo uses commercially reasonable administrative, organizational and technical measures designed to protect information from:

• unauthorized access;
• loss;
• misuse;
• alteration;
• destruction;
• unauthorized disclosure; and
• other security threats.

Security measures may include, as appropriate:

• access controls;
• authentication;
• role-based permissions;
• system monitoring;
• secure communications;
• backups;
• logging; and
• organizational safeguards.

No system connected to the internet can be guaranteed to be completely secure.

Users and Customers are responsible for protecting their credentials, devices and internal access practices.

25. Security Incidents

Franovo may investigate suspected or confirmed security incidents affecting personal information.

Where a personal-data breach requires notification under applicable law, Franovo will provide notifications to affected Customers, individuals or authorities as required.

Where Franovo processes information on behalf of a Customer, Franovo may notify the relevant Customer so that the Customer can fulfill its own legal obligations.

26. How Long We Keep Information

Franovo retains information only for as long as reasonably necessary for the purposes for which it was processed, subject to applicable legal, contractual, security and operational requirements.

Retention periods depend on the type of information and context.

Examples include:

• active account information while an account remains in use;
• commercial and billing records where required for legal or accounting purposes;
• security information for a reasonable period necessary to investigate incidents;
• Customer Content during the Customer’s subscription;
• information required to establish, exercise or defend legal claims.

27. Customer Content After Subscription Termination

Following termination or expiration of a Customer subscription:

Export Period

Franovo intends to provide a 30-day period for available Customer Content export, subject to technical, security and legal limitations.

Access may be read-only or otherwise restricted.

Active-System Deletion

After the export period, Franovo may begin deleting Customer Content from active production systems.

Franovo targets completion of normal active-system deletion within approximately 30 additional days.

Backups

Residual copies may remain in protected backups until they are overwritten or expire through normal backup processes.

Franovo’s target is for such backup copies to expire within approximately 90 days after active-system deletion, unless longer retention is required for legal, security or contractual reasons.

Information That May Be Retained Longer

Franovo may retain limited information where reasonably necessary for:

• accounting;
• tax;
• contractual records;
• security;
• fraud prevention;
• legal claims;
• regulatory compliance; or
• other legal obligations.

Mandatory privacy rights are not limited by these commercial retention periods.

28. Individual Deletion Requests

A Customer organization does not have a general commercial right to require immediate accelerated deletion of its entire Franovo environment outside the standard termination process.

However, this does not prevent an individual from exercising any right to deletion, erasure, concealment or destruction available under applicable data-protection law.

Where Franovo acts as a processor for a Customer, a request relating to Customer-controlled data may need to be directed to that Customer.

Franovo will assist as required by applicable law and contractual obligations.

29. Your Privacy Rights

Depending on applicable law and the circumstances, individuals may have rights including the right to:

• know whether personal information is being processed;
• access personal information;
• obtain a copy of personal information;
• request correction, amendment or updating;
• request restriction or limitation of processing;
• request deletion, erasure, concealment or destruction where legally applicable;
• object to certain processing;
• object to profiling in circumstances provided by law;
• withdraw consent where processing depends on consent;
• request transfer or portability of information where applicable; and
• receive legally required notice of certain personal-data breaches.

These rights are subject to applicable legal conditions and exceptions.

30. Jordan Privacy Rights

Where Jordan’s Personal Data Protection Law No. 24 of 2023 applies, individuals may exercise rights provided by that law, subject to applicable conditions and exceptions.

Such rights include, among others:

• awareness and access;
• obtaining personal data held by a controller;
• withdrawal of consent;
• correction, amendment, addition or updating;
• limiting processing to a particular scope;
• erasure or concealment;
• objection to certain unnecessary, excessive or unlawful processing or profiling;
• transfer of a copy of data to another controller; and
• notification of qualifying personal-data breaches.

31. Saudi Arabia

Where the Saudi Personal Data Protection Law applies to processing relating to individuals in the Kingdom of Saudi Arabia, Franovo and the relevant Customer will address applicable Saudi requirements according to their respective roles.

This may include requirements concerning:

• transparency;
• access;
• correction;
• destruction;
• security;
• appropriate legal grounds for processing; and
• transfers of personal data outside Saudi Arabia.

Nothing in this Privacy Policy is intended to limit mandatory rights under applicable Saudi law.

32. How to Exercise Your Rights

Privacy requests may be sent to:

**info@franovo.com**

Please provide enough information for us to understand and verify your request.

We may need to verify your identity before acting on a request.

Where Franovo processes the relevant information solely on behalf of a Customer, we may direct the request to that Customer or coordinate with that Customer as appropriate.

We may decline or limit a request where permitted or required by applicable law and will provide an explanation where legally required.

33. Marketing Communications

Franovo may send marketing communications where permitted by law.

Where consent is required, marketing will be sent only with the required consent.

Recipients may unsubscribe using an unsubscribe method provided in the communication or by contacting Franovo.

Unsubscribing from marketing does not prevent necessary:

• account messages;
• security notices;
• service communications;
• transactional communications; or
• legal notices.

34. Children

Franovo is a business platform and is not intended for children.

Users must generally be at least 18 years old or otherwise legally capable of using the Services on behalf of the relevant organization.

Franovo does not intentionally design the Services for collection of children’s personal information.

35. Third-Party Websites

Franovo may contain links to third-party websites or services.

Franovo is not responsible for the privacy practices of independent third parties.

Users should review the privacy policies of third-party services before providing information to them.

36. Changes to This Privacy Policy

Franovo may update this Privacy Policy to reflect changes in:

• the Services;
• integrations;
• law;
• security practices;
• business operations; or
• data-processing practices.

The updated Privacy Policy will be posted with a revised Last Updated date.

Where required by law, Franovo will provide additional notice or obtain consent before materially different processing begins.

37. Contact Us

Questions, concerns and privacy requests may be directed to:

New Development Consulting Company شركة التطوير الجديد للاستشارات

Operating under the brand:

Franovo

Email: **info@franovo.com** Website: **www.franovo.com**

© 2026 New Development Consulting Company – Franovo. All rights reserved.