Legal

Privacy Policy

Last updated: November 8, 2026

1. Introduction

This Privacy Policy explains how Novu Systems LLC (“Ribat”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards information when you visit our website or use the Ribat property operations platform and related services (together, the “Service”). Ribat is a business tool for property operators; the Service is intended for business use, not for personal or household use by consumers.

By using the Service you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information we collect

2.1 Information you provide

  • Account & profile data — name, email address, phone number, password, and company details you provide when you register.
  • Property & operational data — the properties, rooms, rate plans, reservations, and settings you add to run your operation.
  • Billing data — subscription plan, room counts used to calculate your fee, and billing contact details. Card payments are processed by our payment processor; we do not store full card numbers.
  • Communications — messages you send us for support or sales.

2.2 Guest information you process through Ribat

To automate check-in and access, the Service processes guest information associated with reservations — such as guest name, contact details, stay dates, and door-access passcodes. Where you use Ribat to manage this data, you are the controller of that guest data and Ribat acts as a processor on your behalf. You are responsible for having an appropriate legal basis and notice for processing your guests' data.

2.3 Information collected automatically

  • Usage & device data — IP address, browser type, pages viewed, and similar diagnostic data.
  • Cookies & similar technologies — see Cookies & analytics.

3. How we use information

  • Provide, operate, maintain, and improve the Service.
  • Synchronise availability, rates, and reservations with connected booking channels.
  • Generate and deliver smart-lock passcodes and guest messages you configure.
  • Process subscriptions, trials, and billing.
  • Provide customer support and respond to your requests.
  • Monitor usage, prevent fraud and abuse, and secure the Service.
  • Comply with legal obligations.

Where applicable law (such as the GDPR) requires it, we rely on the following legal bases: performance of a contract with you; our legitimate interests in operating and improving the Service; your consent (for example, for certain cookies or marketing); and compliance with legal obligations.

5. How we share information

We do not sell your personal data. We share information only as needed to run the Service, including with:

  • Booking channels & channel connectivity providers — to synchronise availability, rates, and reservations with platforms such as Booking.com, Expedia, and Agoda.
  • Smart-lock providers — such as TTLock, to generate and manage door-access passcodes for your reservations.
  • Messaging providers — to deliver booking confirmations, passcodes, and guest messages by WhatsApp and email.
  • Payment processor — to handle subscription billing securely.
  • Infrastructure & analytics providers — hosting, error monitoring, and website analytics that help us operate and improve the Service.
  • Legal & safety — where required by law, to enforce our terms, or to protect rights, property, and safety.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Cookies & analytics

We use strictly necessary cookies to operate the Service. With your consent where required, we may use analytics and marketing cookies (for example, to understand site traffic and measure campaigns). You can control cookies through your browser settings; disabling some cookies may affect functionality.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce agreements. Guest data you process is retained according to your configuration and instructions.

8. Security

We use technical and organisational measures designed to protect information, including encrypted connections and role-based access controls. Door-access passcodes are unique, time-limited, and revocable. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

Your information may be processed in countries other than your own. Where we transfer personal data internationally, we take steps to ensure appropriate safeguards are in place as required by applicable law.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at [email protected]. If we process guest data on your behalf, please direct guest requests to the operator that manages the relevant property.

11. Children

The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. Material changes may be communicated through the Service.

13. Contact us

Questions about this policy or your data? Contact us at [email protected]. Our website is getribat.com. Ribat is operated by Novu Systems LLC, a limited liability company organized in the State of Wyoming, United States.

Novu Systems LLC
30 N Gould St Ste R
Sheridan, WY 82801
United States