Owner launch review

Prepared September 23, 2026 · US launch; Haiti under consideration.

Recommended subscription scheme

View subscription plans inside your workspace

USD before applicable taxes. Annual billing saves 16.7% relative to 12 monthly payments. One business per workspace. Standard storage: 1 / 5 / 20 / 40 GB. Team costs $24.90 per included user monthly, compared with $27.80 for Business; this rewards larger teams without doubling the subscription charge. No unlimited AI and no automatic overages. Keep offline work in every plan. Regulated sensitive-document storage requires a separately costed secure-workspace offering before sale. Do not promise it at these prices before vendor and security costs are known.

Market survey

These are reference offers, not like-for-like feature equivalence. NovaTek’s prices are a recommendation based on this survey and its proposed small-business scope, not evidence of willingness to pay. Interview the original target of 10 pilot businesses for 30 days and aim to validate at least five paying businesses before expanding. Do not assume US pricing will fit Haiti; test local affordability and currency/payment preferences before offering a regional price.

Margin controls

Use a pilot target of no more than 25% of subscription revenue for variable service costs. That gives planning ceilings of $7.25 / $14.75 / $24.75 / $44.75 per monthly account, not supplier quotes or a profit forecast. Measure actual AI token/document costs, storage/egress, email and support usage. Payment and billing fees, fixed hosting, security contracts, staff and tax costs also affect margin. AI allowances must have input/output and file-size limits. Bill messaging only through approved prepaid allowances or transparent opt-in charges; do not subsidize unlimited SMS or WhatsApp. Annual discounts and referral credits reduce realized revenue.

Accounts and access required

View subscription plans inside your workspace

Sign in on each provider’s own page. Do not send passwords, verification codes or secret keys in chat. Configure restricted credentials directly in the server’s secret manager. You do not need a new account for every generic menu item.

NovaTek subscriptions and each business’s customer payments are separate. Stripe Billing handles the former. If NovaTek facilitates customer payments for independent businesses, design a connected-account flow with appropriate onboarding and liability review. Do not collect all businesses’ revenue into NovaTek’s own merchant account. The original plan’s MonCash/NatCash/Haitian-bank options remain future integration candidates, not current features or supported payment promises.

Trial and referral safeguards

Implemented for private testing: owner authentication, origin and JSON checks, immutable seven-day server timestamps, single trial row per owner, atomic 50-action counter, retry deduplication and fail-closed API responses. The sandbox trial does not restrict ordinary offline demo work and is not connected to real AI costs.

Required before public launch: verified signup, tenant membership checks, bot protection, distributed throttling, duplicate-business review, email normalization without unsafe assumptions, server-approved plan entitlements, quotas on every costly endpoint, separate sensitive-data permissions, renewal/expiry notices and an accessible appeals path. A browser plan selector must never grant paid rights. Offline editing needs signed entitlements, reconnection validation and a safe export path; it cannot reliably enforce public billing using local clocks.

Referral policy prepared, not active: $10 to both businesses after at least $29 net paid and a 30-day qualification hold; maximum $100 earned per referrer per year; use at most 50% of a future invoice. Activation requires verified and idempotent payment webhooks, immutable credit ledger, atomic caps, refund/chargeback reversals and self-referral review. No client-side code can award real credits.

Reconciliation with “Logo attachment update”

• Keep NovaTek AI branding, “Your AI Business Operating System,” and “Tell it. It gets done.” Preserve the current landing design and eight feature cards.
• Restore all 12 Workspace preview items: Overview, Customers, Catalog, Orders, Quotes, Invoices, Expenses, Reports, AI Assistant, Accounting, Client Follow-up and Team & Roles.
• Restore mobile Home / Customers / prominent AI / Orders / More navigation, large quick actions and accessible drawer controls. Quote and invoice forms now include a discount before tax and notes; totals round to cents.
• Keep generic provider labels in normal workflows. Legal provider disclosures and this owner checklist necessarily name vendors when explaining data handling.
• Preserve later requested industry catalogs, accounting charts, document capture, multichannel drafts and offline sync. The older document’s narrower scope does not erase those later requests.
• The referenced conversation describes a separate public custom-domain deployment. The current private workspace is a different site; do not overwrite either site or change audience without reconciling deployments and receiving publication approval.
• Still incomplete: real signup/sign-in, two-business isolation, enforced owner/manager/employee roles, administration console, live AI tools, inbox/message delivery, complete app-wide localization and the company-owned production repository. Demonstration buttons do not satisfy those acceptance criteria.

Insurance workspace — limited launch scope

Retain the insurance industry selection for basic business contacts and general sales only. Enrollment, underwriting, claims, policy/member identifiers, medical records and PHI are excluded. No clinical or patient workflows. Notices and restricted menus do not reliably detect prohibited content in free-text fields or files. Before launch, review all enabled integrations, retained data, imports and customer use cases. Existing stored records have not been silently deleted; any legacy records need an authorized review before production migration.

Security and legal launch gates

Permitted sensitive records, including SSNs, tax returns and immigration identity documents, still require private storage and tenant isolation, MFA, malware scanning, encryption/key management, short-lived links, audited access, restore-tested backups, retention/deletion jobs and an incident response plan. Complete DPAs and BAAs where applicable; confirm every vendor in the data path, not only the database. Medical records and PHI are excluded from the initial launch. A HIPAA add-on or BAA is not part of the proposed non-PHI launch configuration, subject to confirming actual workflows. Do not enable any use requiring these agreements. Exclude health attachments even inside tax or immigration cases. No sensitive content in support logs or unrestricted AI prompts. Use only synthetic documents during testing.

Review the draft privacy, terms, cancellation, trial, referrals, AI, communications and sensitive-data notices with counsel. Confirm a monitored contact inbox and the supplied legal address. The US is confirmed; Haiti remains a jurisdiction review item. International customers do not automatically imply EU/UK availability. Sales-tax registrations and obligations must be determined with your tax adviser; sandbox transactions do not count toward live threshold monitoring. Automatic tax has not been enabled and no registrations have been changed.

Primary references

• Stripe trial guidance and customer subscription management
• Supabase production email setup and HIPAA project requirements
• FTC Safeguards Rule
• HHS cloud-computing guidance
• Florida personal-information security and breach requirements
• CAN-SPAM business guide
• FTC negative-option rule resources — review current law and state renewal rules, not an assumption that an older federal rule is effective.