Privacy policy.
How we handle information.

NovaSoft Sites is operated by NovaSoft Technologies Pty Ltd (NovaSoft), ABN 31 694 025 379, ACN 694 025 379. Contact help@novasofttechnologies.com for privacy questions, access or correction requests, deletion requests and complaints. This is the temporary working privacy address until a replacement is published.

This policy covers account holders, people who visit customer websites or send Grow enquiries, and people who contact us for support. A customer site owner may have its own privacy policy for its business and use of enquiries. Contact that owner about its separate use of information.

For accounts, we collect the name and email supplied at signup, a password hash rather than the plaintext password, verification and reset records, session records, Terms acceptance version and time, and security metadata such as IP address and user agent. We receive information you send in support correspondence.

For private drafts and websites, we hold site names, template choices, edited source, uploaded images, owner and revision details, host claims, release versions and usage records. Draft or published content may itself contain personal information about other people. Device drafts are held in that browser’s local storage until the user clears them; we do not receive a device draft until an account save is acknowledged.

For paid plans, Stripe processes payment details. We receive or retrieve customer, Checkout, subscription, price, invoice, tax and payment-status identifiers and billing records needed to grant and reconcile a plan. We do not ask for a full card number through NovaSoft support.

For a Grow enquiry, the visitor provides a required name, email and message. We record the receiving site, host, time, receipt, delivery status and abuse/security data. Account signup and Grow enquiries use Cloudflare Turnstile, which receives technical challenge information, including the visitor IP supplied for verification. The form is not designed for sensitive information and asks visitors not to provide it.

We collect information directly through the editor, account forms, uploads, customer website forms and support messages; from Stripe about a transaction or subscription; and automatically from browser requests and security checks. We use it to create and verify accounts, provide private drafts and publication, enforce per-site plans, process and reconcile payments, deliver owner enquiries, prevent abuse, provide support and comply with legal obligations.

We use necessary service and security records to investigate faults, disputes, fraud and unauthorised access. We do not use customer site content for AI training, CRM transfer or unrelated advertising at launch. We do not enrol Grow visitors in marketing. If marketing is introduced, it will require a separate lawful process and choice.

The service automatically checks verified sessions, site ownership, plan authority and usage caps before allowing some operations. These are service access and billing controls, not a promise that all decisions are made solely by automated means; a person can contact us for review of a disputed restriction.

A site owner decides why it publishes content and how it uses a visitor enquiry. NovaSoft provides the form, secure storage and notification mechanism and handles information for its own account, security and support purposes. These descriptions do not conclusively determine each party’s legal role in every situation.

Before a visitor submits a Grow form, it explains the required fields, storage for the verified owner, possible email notification, Cloudflare abuse check and NovaSoft privacy link. The owner is expected to provide any additional notice or consent required for its own business use. A visitor can contact the owner shown on the site about a message and contact NovaSoft about our handling.

Cloudflare supplies edge hosting, D1 and R2 storage, email sending, Turnstile and security services. Stripe supplies Checkout, subscriptions, invoices, tax and customer portal services. Mail addressed to the temporary help@novasofttechnologies.com inbox is handled through Microsoft 365 mail services. Our personnel and authorised support providers may access information only as needed for their roles. We may disclose information to regulators or others where required or permitted by law, or to protect rights and security.

A published customer site is public. Grow enquiry information is available to the verified owner of that site and may appear in a notification sent to that owner’s verified account email. We do not provide a separate recipient or CRM transfer at launch. We do not sell customer content or visitor enquiries to data brokers.

Information may be processed or accessed outside Australia, including the United States and other places where Cloudflare, Stripe, Microsoft and their service providers operate. We do not promise Australia-only storage or access; an Oceania storage setting is not an Australian residency guarantee. Contact us for information about a particular transfer or provider.

We use access controls, verified account sessions, site ownership checks, private storage, limited service bindings and security logging appropriate to the service. Customer websites are served from hosts separate from the application origin. No online service can guarantee that information is never lost, misused or accessed without authority.

We investigate suspected security incidents, contain them where feasible, preserve necessary evidence, and assess notification obligations under applicable law. Contact help@novasofttechnologies.com to report a suspected issue. Do not email passwords, verification codes, full card numbers or unnecessary sensitive material.

We keep account and site information while needed to provide the account, drafts, publication and support. We may retain limited records afterward where reasonably necessary for billing and tax obligations, security, dispute resolution, fraud prevention or legal claims. Grow enquiries remain available to the site owner while its relevant account data is retained, subject to verified requests and applicable obligations. Provider logs and support mail have their own retention settings.

Cancelling a paid subscription stops future renewal but does not automatically delete an account, draft, upload or private prior release. Unpublishing or closing an account does not remove copies made by public visitors or search services. We assess a verified deletion request and remove or de-identify information from active systems when no longer needed and legally permitted. Some billing records, incident evidence and backups can remain for a limited justified period; we will explain relevant limits to the requester.

Device drafts are stored in the user’s browser and can be removed through its controls; we cannot remotely erase a device-only copy. We review retained information and take reasonable steps to remove or de-identify it when no longer needed for a permitted purpose, subject to applicable recordkeeping duties and justified backup retention. We will not promise immediate erasure from every backup.

Ask help@novasofttechnologies.com for access to or correction of information we hold about you, or to raise a deletion or privacy choice request. We will verify identity and authority before disclosing private account, site or enquiry information. We may need to decline or limit a request where law permits or requires that outcome, and will explain the reason and available review path.

Account holders can update some account or billing details through the service or Stripe portal. Browser settings can remove device drafts and cookies, but doing so can sign you out or erase work that was never saved to an account. Marketing subscriptions are not enabled at launch.

Send a privacy complaint to help@novasofttechnologies.com, describing the issue and a safe way to reply. We will record it privately, investigate with appropriate staff, and respond within a reasonable time. We aim to acknowledge promptly and resolve or explain progress within 30 days; if more time is needed, we will tell you why and when to expect an update.

Where the Privacy Act applies, you may be able to complain to the Office of the Australian Information Commissioner if you are dissatisfied after giving us a reasonable opportunity to respond. Other legal rights and complaint avenues may also apply.

NovaSoft Sites accounts are intended for adults aged 18 or over. The general Grow form must not be used intentionally to collect children’s or sensitive personal information. We do not knowingly offer an account service to children. If we learn that such information was supplied contrary to these rules, we will assess deletion and any legal obligations.

Do not place a password, payment-card number, government identifier, medical information or other sensitive information in a general support email or enquiry form. If you need to report a security or privacy issue, contact us first so we can agree a safer method if necessary.

The Cookies and Browser Storage notice describes device drafts, necessary sessions and third-party surfaces. Stripe Checkout and portal run on Stripe’s origin and may use their own cookies. Cloudflare Turnstile on account signup and Grow forms uses Cloudflare’s challenge service. The public marketing pages do not include an optional advertising tracker.

A customer website may contain its own content or links to another service. The site owner is responsible for its own lawful disclosures. Another website’s privacy practices are governed by that website’s notices, not this policy.

We will show the active version and effective date and publish material changes before they take effect where practicable. We will notify affected account holders and seek further consent where law requires it. A change will not retrospectively erase rights concerning earlier handling.