Privacy Policy

Last Updated: September 2026

This Privacy Policy ("Policy") describes how Novacekite ("we," "us," "our," or the "Company") collects, uses, discloses, retains, and safeguards personal information when you access or use the website located at novacekite.net and any associated applications, features, tools, and subscription-based software services (collectively, the "Services"), or otherwise interact with us. This Policy applies to all visitors, registered users, account administrators, and business customers of the Services, and it governs personal information we process in connection with the Services. By accessing or using the Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with this Policy, you must discontinue use of the Services.

This Policy is designed to comply with applicable United States federal and state law, including Section 5 of the Federal Trade Commission Act, 15 U.S.C. § 45, the Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501–6506 (COPPA), the California Consumer Privacy Act as amended by the California Privacy Rights Act, Cal. Civ. Code §§ 1798.100 et seq. (CCPA/CPRA), the Virginia Consumer Data Protection Act, Va. Code Ann. §§ 59.1-575 et seq. (VCDPA), and the Colorado Privacy Act, Colo. Rev. Stat. §§ 6-1-1301 et seq. (CPA). Where the Fair Credit Reporting Act, 15 U.S.C. §§ 1681 et seq. (FCRA), applies to any permissible purpose for which you engage us, we will handle information in accordance with FCRA obligations. This Policy should be read together with our Cookie Policy and our Terms and Conditions, which are incorporated herein by reference.

1. Information We Collect

We collect personal information that you provide directly to us, information that is generated automatically as you use the Services, and information we receive from third parties such as integration partners, resellers, and identity or payment verification providers. The categories of information we collect depend on how you interact with the Services and the configuration choices made by the organization that provisions your account.

1.1 Information You Provide

• Identity and contact data: name, business name, job title, email address, postal address, telephone number, and account credentials.
• Account and billing data: subscription tier, seat count, transaction history, billing contact, and payment card or ACH details processed by our third-party payment processors (we do not store full payment card numbers on our systems).
• User content: files, records, configurations, messages, support tickets, survey responses, and other materials you upload to or generate within the Services.
• Communications data: the content of emails, chat sessions, and call notes exchanged with our sales, support, or success teams.

1.2 Information Collected Automatically

When you access the Services, we and our service providers automatically collect internet and network activity information, including IP address, device identifiers, browser type and version, operating system, referring and exit pages, pages viewed, features used, session timestamps, and interaction events. We use cookies, pixels, software development kits, local storage, and similar technologies for these purposes. For a full description of the technologies used, their purposes, and your choices, please review our Cookie Policy.

1.3 Sensitive Personal Information

We do not intentionally collect sensitive personal information as defined under the CCPA/CPRA (such as government identifiers, precise geolocation, racial or ethnic origin, religious beliefs, health data, or sexual orientation) unless you or your organization voluntarily submit it through free-text fields. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you. Where sensitive personal information is submitted, we limit its use to the purposes reasonably necessary to provide the Services and as permitted by applicable law.

1.4 Notice at Collection

At or before the point of collection, we provide notice of the categories of personal information collected, the purposes of collection, whether the information is sold or shared, and the applicable retention period. Where you act as an authorized representative of a business customer, your information may be processed on that customer's instructions, and that customer is responsible for providing any required notices to its end users.

2. How We Use Your Information

We use the information we collect for the following business and commercial purposes: to create and administer accounts; to provide, operate, maintain, and improve the Services; to process transactions and send related invoices, receipts, and renewal notices; to authenticate users and enforce access controls; to provide customer support and respond to inquiries; to send administrative, security, and service-related communications; to conduct research, analytics, and product development; to detect, prevent, and remediate fraud, abuse, security incidents, and violations of our Terms and Conditions; and to comply with legal obligations and enforce our agreements.

Where permitted by applicable law, we may use your information to send you marketing communications about products, features, promotions, and events that may be of interest to you. You may opt out of marketing emails at any time by using the unsubscribe link included in each message or by contacting us using the details in Section 10. Please note that even after opting out of marketing, we may continue to send transactional or relationship messages necessary to administer your account.

We may de-identify or aggregate personal information so that it can no longer reasonably be associated with an identifiable individual, and use such de-identified or aggregated data for analytics, benchmarking, industry reporting, and service improvement. We maintain technical and organizational controls designed to prevent re-identification and will not attempt to re-identify de-identified data except as permitted by law.

We will not use your personal information for materially different, unrelated, or incompatible purposes without first providing you with notice and, where required, obtaining your consent. To the extent we process personal information as a service provider or processor on behalf of a business customer, we will do so only in accordance with that customer's documented instructions and applicable contractual limitations.

3. Information Sharing

We disclose personal information to service providers, contractors, and other third parties that perform functions on our behalf, such as cloud hosting, data storage, payment processing, email delivery, customer relationship management, analytics, security monitoring, and professional advisory services. These recipients are contractually obligated to use personal information only for the purposes for which it was disclosed and to protect it consistent with applicable law.

We may also disclose personal information to: (a) affiliates and subsidiaries that follow practices at least as protective as those described in this Policy; (b) integration partners and third-party applications that you or your organization authorize to connect to the Services; (c) parties to a corporate transaction, such as a merger, acquisition, financing, reorganization, or sale of assets, in which case information may be transferred as part of the transaction and remains subject to this Policy until amended; (d) law enforcement, regulators, courts, or other governmental authorities where we believe disclosure is required or permitted by law, or necessary to protect the rights, property, or safety of the Company, our users, or the public; and (e) other parties with your direction or consent.

Sale and sharing. We do not sell personal information for monetary consideration. Certain uses of third-party analytics and advertising cookies may constitute a "sale" or "sharing" for cross-context behavioral advertising under the CCPA/CPRA and analogous state laws. Where such activity occurs, we provide a "Do Not Sell or Share My Personal Information" mechanism as described in Section 5 and honor opt-out preference signals such as the Global Privacy Control (GPC) as described in Section 4.

We do not disclose personal information to third parties for their own direct marketing purposes unless you have affirmatively authorized us to do so. We require all third parties acting as service providers to agree to contractual restrictions consistent with the requirements of the CCPA/CPRA and applicable state privacy statutes.

4. Cookies and Tracking

We use cookies and similar tracking technologies that are strictly necessary, functional, analytical, and, where deployed, advertising-related. Strictly necessary cookies are required for the Services to function, including authentication, session management, load balancing, and security. Functional cookies remember your preferences and settings. Analytical cookies help us understand how the Services are used so we can improve performance and usability.

There is no general United States federal cookie-consent law. Cookie and tracking practices are governed by Section 5 of the Federal Trade Commission Act, 15 U.S.C. § 45, which prohibits unfair or deceptive acts or practices; applicable state privacy laws including the CCPA/CPRA, VCDPA, and CPA; and COPPA with respect to children under 13. We therefore operate on an opt-out model rather than a jurisdiction-wide prior-consent model, while honoring the rights described in this Policy.

We honor opt-out preference signals, including the Global Privacy Control (GPC), as required under the CCPA/CPRA and the Colorado Privacy Act. When we detect a valid GPC signal on your browser or device, we will treat it as a request to opt out of the sale or sharing of personal information for cross-context behavioral advertising to the extent technically feasible. Because GPC signals are browser- and device-specific, you will need to set your preference on each browser and device you use.

You can also control cookies through your browser settings, which typically allow you to block, delete, or receive notifications about cookies. Disabling certain cookies may cause portions of the Services to malfunction or be unavailable. Please consult our Cookie Policy for a detailed list of the cookies we deploy, their providers, purposes, and retention periods.

5. Your Rights and Choices

Depending on your state of residence, you may have some or all of the following rights with respect to your personal information: the right to know and access the categories and specific pieces of personal information we have collected; the right to request deletion; the right to request correction of inaccurate personal information; the right to opt out of the sale or sharing of personal information; the right to limit the use and disclosure of sensitive personal information; the right to data portability; the right to opt out of targeted advertising and certain profiling; and the right to non-discrimination for exercising your privacy rights.

5.1 Exercising Your Rights

You may submit a verifiable consumer request by emailing [email protected] or by calling +12621585105. Requests must include sufficient information to allow us to verify your identity and understand the nature of your request. We will acknowledge receipt and respond within the timeframes required by applicable law, generally within 45 days for CCPA/CPRA requests, subject to a permissible extension where reasonably necessary. We will not charge a fee to process a verifiable request unless it is excessive, repetitive, or manifestly unfounded, in which case we may charge a reasonable fee or decline to act, with an explanation.

5.2 Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require proof of the agent's written authorization signed by you and may require you to verify your own identity directly with us, except where permitted otherwise by law, including where you have provided a power of attorney under applicable state law.

5.3 Opt-Out of Sale, Sharing, and Targeted Advertising

To opt out of the sale or sharing of personal information, or to opt out of targeted advertising and certain profiling, use the "Do Not Sell or Share My Personal Information" link available on our website, or contact us using the details in Section 10. We do not knowingly sell or share the personal information of consumers under 16 years of age without affirmative authorization as required by law.

5.4 Appeals

If you are a resident of a state that provides a right of appeal, such as Virginia or Colorado, and we decline to act on your request, you may appeal our decision by replying to our response or by contacting us at [email protected] with the subject line "Privacy Appeal." We will inform you of our decision and the reasons for it within the timeframe required by applicable law. If your appeal is denied, you may contact your state attorney general.

6. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, and unauthorized access. These measures include encryption in transit and at rest where appropriate, role-based access controls, multi-factor authentication, network segmentation, logging and monitoring, vendor risk assessment, employee confidentiality obligations, and periodic security testing.

No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly at [email protected] if you suspect unauthorized access to your account. To the maximum extent permitted by law, we disclaim liability for security incidents arising from circumstances beyond our reasonable control, including your failure to safeguard credentials.

In the event of a security incident involving personal information, we will notify affected individuals and relevant authorities as and where required by applicable state breach-notification statutes.

6.1 Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to comply with legal, tax, and accounting obligations, to resolve disputes, and to enforce our agreements. Retention periods vary based on the nature of the data and the context of processing. When personal information is no longer required, we will delete, de-identify, or aggregate it in accordance with our retention schedule.

7. International Data Transfers

Novacekite is based in the United States, and the Services are hosted and operated primarily within the United States. If you access the Services from outside the United States, you acknowledge that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we will implement appropriate safeguards in accordance with applicable law, such as Standard Contractual Clauses approved by the European Commission or the UK International Data Transfer Addendum, together with supplementary technical and organizational measures where required. For US-only operations, transfers are governed by applicable state law and contractual commitments rather than by the General Data Protection Regulation, which applies only where we target individuals in the EU/EEA. Requests regarding international transfers may be directed to [email protected].

8. Children's Privacy

The Services are intended for business and professional use and are not directed to children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under 13 except in compliance with COPPA, 15 U.S.C. §§ 6501–6506. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly.

Where the Services are made available to educational institutions or organizations that serve children, those organizations are responsible for obtaining verifiable parental consent and providing any required notices before permitting children to use the Services. We will not condition a child's participation in an activity on the disclosure of more information than is reasonably necessary, and we obtain verifiable parental consent before enabling any tracking technologies directed at children under 13, consistent with COPPA and Federal Trade Commission guidance.

Parents or guardians who believe that a child under 13 has provided personal information to us may contact [email protected] or +12621585105 to request review, correction, or deletion of that information.

9. Changes to Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or operational needs. When we make material changes, we will post the revised Policy at novacekite.net with a new "Last Updated" date and, where required by law or where the changes are significant, provide additional notice by email or through an in-product notification.

Your continued use of the Services after the effective date of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to remain informed about how we protect your information. If you do not agree to a revised Policy, you must stop using the Services and, if applicable, terminate your account in accordance with our Terms and Conditions.

10. Contact Information

If you have questions, concerns, or requests regarding this Policy or our handling of personal information, please contact us using the details below. We are committed to resolving privacy-related concerns promptly and transparently.

• Company: Novacekite
• Email: [email protected]
• Phone: +12621585105
• Mailing Address: 415 Mission Street, San Francisco, CA 94105, United States
• Website: novacekite.net

For California residents, requests to know, delete, correct, or opt out of the sale or sharing of personal information should be directed to [email protected] with the subject line "California Privacy Request" or submitted through the "Do Not Sell or Share My Personal Information" link on our website. For residents of Virginia, Colorado, and other states with comprehensive privacy laws, requests may be submitted using the same contact methods, and we will respond in accordance with the VCDPA, CPA, and any other applicable state privacy statute.