Privacy, terms & trust

NovaTek Business Solutions Inc. · Florida, USA
Version: September 23, 2026

Who operates NovaTek

Use this contact for privacy, security, billing, accessibility and cancellation requests. Do not email medical records, identification images, payment-card details or Social Security numbers. An authorized, secure verification process will be used when necessary.

Privacy notice for the current preview

The preview stores the business records you enter in your browser and synchronizes saved workspace fields to its hosted database when online. This can include contacts, addresses, activity notes, financial entries, documents’ extracted contact fields, team records, message drafts and settings. Browser storage persists until cleared. The hosting service authenticates access and may process account identifiers, network information and service logs under its own terms. NovaTek uses workspace information to provide the requested functionality, troubleshoot failures and protect access.

The photo/PDF reader processes original files on your device. The app does not intentionally save or upload the original capture file; contact fields you review and save become workspace records and may synchronize. This is not a secure document vault. The current AI drafting actions use demonstration logic rather than a connected generative AI service. Choosing an external email or messaging app passes the selected content to that app for your review and sending.

We do not sell preview workspace data or use it for targeted advertising. The app itself does not install optional analytics or advertising trackers. Essential browser storage and service-worker caching support offline use. Hosting and login services can set their own necessary cookies. No optional marketing tracking should be added without updating this notice and obtaining consent where required.

Preview records currently have no automatic expiry or scheduled deletion. Request deletion or an export using the contact above. Clearing your browser removes local copies but does not itself delete synchronized server records; server deletion does not erase copies on other devices. Do not clear browser data before exporting unsynchronized work. Security measures reduce risk but cannot guarantee that an internet service or device will never be compromised.

Launch privacy commitments — draft

For business account administration, subscriptions, security and our own communications, NovaTek determines the purposes of processing. For customer records uploaded by subscribing businesses, NovaTek generally processes information on their documented instructions; the subscribing business remains responsible for lawful collection, notices, permissions and the accuracy of its records. A data-processing agreement must reflect the actual relationship and approved service providers.

At launch, collected categories may include account and business details, contact and case information, subscription and billing references, communications, usage and security events, and explicitly authorized documents. Card details should be collected by the payment service, not stored in NovaTek. Purpose limitations will cover service delivery, user-requested assistance, support, billing, fraud prevention and legal obligations. Marketing consent must remain separate from necessary service communications. Where a legal-basis framework applies, processing must be mapped to contract performance, legal obligations, appropriately assessed legitimate interests or valid consent; sensitive-data processing requires its own applicable authority.

Proposed retention: active workspace data for the service period; 30 days of export access after account closure, followed by deletion from active systems; backup expiry within 90 additional days. These schedules are not implemented yet and must be verified before launch. Legal holds, fraud evidence and required financial records may require limited longer retention, with documented purposes and restricted access. A deletion request will receive a response explaining applicable exceptions.

The US is the confirmed launch market. Haiti is under consideration; availability, local terms, transfer requirements, language, consumer rights and tax treatment must be reviewed before launch there. This preview does not represent a global rollout. Do not assume US hosting alone authorizes international transfers. If EU/UK or other regulated markets are later added, assess territorial reach, transfer mechanisms, local representatives and additional notices before collecting their customers’ information.

Access, correction, deletion & complaints

Contact NovaTek to request access, correction, export or deletion, or to raise a privacy complaint. Identify your account and request without including sensitive files. We may reasonably verify authority to protect your records. Customers whose data belongs to a subscribing business should normally contact that business first; NovaTek will assist the responsible business where appropriate. Applicable law may provide additional rights to restrict or object to processing, withdraw consent, appeal a decision, or complain to a regulator. We will honor applicable rights and response periods without retaliation. Withdrawing optional consent does not make earlier lawful processing unlawful.

Terms of use — draft launch agreement

Eligibility and authority. Account users must be at least 18 and authorized to act for their business. Customer records involving minors require appropriate business authority and safeguards; minors may not create their own accounts. Keep credentials private, use required account protection and promptly report unauthorized access. Each business must have a separate authorized workspace; seats are for named users, not shared passwords.

Service and ownership. NovaTek provides business-management software, subject to the selected plan and disclosed limitations. You retain ownership of your content and grant only the rights needed to host, process, back up and transmit it for your requested service. NovaTek retains its software and branding. No general right to use sensitive customer content for model training is granted by these terms. Government form names and links do not imply government endorsement.

Acceptable use. Do not upload unlawful or malicious material, violate others’ privacy or intellectual-property rights, impersonate others, send unsolicited bulk messages, bypass limits, scrape private information, share accounts, interfere with security or exploit trial/referral promotions. No illegal discrimination or automated consequential eligibility decisions may be based solely on AI outputs. NovaTek may restrict clearly abusive or unlawful activity, providing notice and a review channel when safe and lawful.

Availability and offline work. Some previously prepared features work offline; cloud sync, account verification, payment processing and message delivery require a connection. Unsynchronized work remains on the device and may be lost if browser storage is removed. Conflicting edits require review. Offline access does not authorize bypassing subscription limits or retaining sensitive records on an unapproved device. No guaranteed uptime or recovery period is offered unless separately agreed.

Billing. Paid subscriptions begin only after an explicit checkout showing the plan, total charge, tax, billing frequency, renewal and cancellation terms. Plan prices are available inside your workspace or on request. Prices are USD and exclude applicable taxes. Annual totals are charged in advance; monthly equivalents are comparisons only. The issuer may apply conversion or cross-border charges. No unapproved usage overages. Material price changes apply prospectively with advance notice and an opportunity to cancel as applicable law requires.

User and NovaTek responsibilities

Your responsibilities. You are responsible for lawful, authorized use of the service, the content you submit, required notices and permissions, appropriate access for your team, and safeguarding your credentials and devices. Follow the restricted-use notice, review AI outputs and extracted information before relying on them, maintain required business records, and use appropriately licensed professionals when needed. Promptly report suspected misuse or unauthorized access without including sensitive content in your report.

NovaTek’s responsibilities. NovaTek Business Solutions Inc., as the platform operator, remains responsible for its own actions and omissions, applicable security and privacy duties, handling of information, and obligations concerning its service providers. User responsibilities do not replace NovaTek’s obligations to implement appropriate safeguards, respond to incidents, or provide notices where required by applicable law. Planned safeguards described on this page are not a claim that those safeguards are already implemented in the preview.

Responsibility for violations. Each party is responsible for its own breaches of these terms and applicable law, to the extent established by the facts and applicable law. These terms do not automatically assign every violation to either party, excuse NovaTek’s negligence, or transfer all liability to users. Nothing limits rights, remedies or liabilities that applicable law does not permit to be limited.

Disputes. The service is provided with the limitations described here, subject to mandatory warranties and consumer protections. These draft terms do not impose mandatory arbitration or a class-action waiver. Florida law governs to the extent permitted, without depriving consumers of mandatory protections in their home jurisdiction. Contact support first to seek a practical resolution; that does not limit access to regulators or courts.

Updates and termination. Material terms changes require advance notice and renewed acceptance where required. Businesses may cancel using the process below. NovaTek may end service for material breach, with reasonable notice and an opportunity to remedy when appropriate, or immediately where needed to prevent harm or comply with law. Provide a reasonable export opportunity unless legally or securely prohibited. Current terms, dates and acceptance records must be retained once public signup is activated.

Seven-day free trial

Proposed launch offer: one seven-day trial per business and verified owner. No card is required and the trial does not automatically create a paid subscription. The server records the start and end time; deleting a browser cache, changing a device clock or creating another workspace does not extend eligibility. At expiry, online paid services stop until the customer separately subscribes. Previously saved local records remain available for export; expiry must not destroy the customer’s work.

Proposed limits: one workspace, two named users, 100 contacts, 50 AI actions, 20 document extractions and 100 MB of nonsensitive sample documents. An AI action means one user-requested successful draft, summary or extraction within published size limits; failures must not be billed. Trial messaging is restricted to verified test recipients. No bulk campaigns, public file sharing or real regulated documents. These public-service limits are not yet enabled. The current Billing page tests only a server-owned timer and 50-action counter for the preview owner.

Launch safeguards require verified email, bot protection, request throttling, duplicate-business review, server-enforced quotas and idempotent requests. Shared office networks must not alone cause an automatic permanent rejection. No identity document should be collected solely to obtain a free trial. Suspected abuse may pause the promotion with a support review route; no system can eliminate every duplicate identity.

Cancellation & refunds

Proposed policy: cancel renewal from Billing → Manage subscription, without calling support. If unavailable, email NovaTek using the address above. Confirm the effective date in writing. Access continues through the paid period, and the next renewal is stopped. The public cancellation portal is not connected yet; no paid subscription exists in this preview.

The free trial requires no cancellation to prevent a charge. For the first paid subscription, request a full subscription refund within seven calendar days after the initial payment. Later payments are generally nonrefundable except duplicate charges, errors or rights required by law; cancellation ordinarily takes effect at the end of the paid period. Approved refunds return to the original payment method. This policy does not restrict applicable cooling-off, refund or other mandatory consumer rights. Document export and account deletion are separate from stopping renewal.

Referral credits — proposed program, not yet active

Invite a genuinely new, independently owned business through an assigned referral link. Both businesses earn $10 of promotional subscription credit after the referred business makes its first net subscription payment of at least $29 (excluding tax and after discounts) and remains paid for 30 days. One referral attribution per new business; no self-referrals, affiliated duplicate accounts, fake users, purchases of referrals or unsolicited mass messaging.

Credits remain pending during the qualification period. Refunds, chargebacks or confirmed fraud reverse related awards. Credits apply only to future NovaTek subscription charges, before tax where legally appropriate, up to 50% of each invoice. Up to $100 may be earned by a referrer each calendar year. Credits are nontransferable, have no cash value and no scheduled expiry while the account remains open. Existing earned credits will be honored under their original terms if the program changes, subject to fraud reversals and mandatory law. Credits cannot be withdrawn as cash or used for government fees, messages or third-party services. Disclose the referral incentive when recommending NovaTek.

Restricted-use notice: no medical records or PHI

Prohibited information and activities. Do not enter, upload, scan, photograph, import, synchronize, transmit or ask AI to process medical records, diagnoses, symptoms, treatment notes, prescriptions, lab results, clinical images, health claims, identifiable health-plan enrollment or eligibility records, or patient/member/policy identifiers. Do not combine ordinary contact information with health information. The restriction applies to files, free-text notes, custom fields, message drafts, emails, SMS, WhatsApp, AI prompts, integrations, offline storage and support requests.

Insurance workspace limits. Use the insurance industry workspace only for basic prospect contact details, public product information, general sales activity and ordinary agency administration. Do not use it for patient appointments, medical underwriting, health coverage eligibility, claims, enrollment, policy administration or decisions based on health information. A person’s name or phone number may become protected information when associated with their care or health-plan status; removing a diagnosis field does not make a workflow automatically permissible.

Tax and immigration attachments. A tax or immigration case may contain health-related material. Do not upload an entire file containing medical examinations, disability evidence, health coverage/member information or other prohibited content. Review each attachment before using capture or import. Do not rely on OCR, AI, a filename filter or automated redaction to determine legal de-identification. This offering does not provide a de-identification service.

Your responsibilities. Before entering data, establish authority to collect and use it, provide required notices, obtain applicable permissions and confirm that the intended workflow fits this offering. Do not connect a healthcare system or use NovaTek on behalf of a covered entity or business associate where the work involves PHI. If your activity requires a BAA, use a suitably contracted service instead. Consent from an individual alone does not replace a required BAA or other legal obligations.

Accidental submission. Stop further uploading, sharing and synchronization of the affected content. Contact info@novatekbusinesssolutions.com with the account and record reference only; do not include the sensitive content in the report. NovaTek must assess the incident, contain access where possible, and arrange authorized removal or other legally required handling. Browser deletion alone does not remove synchronized, backup or recipient copies. Do not assume that reporting guarantees immediate deletion or eliminates notification duties.

Enforcement and limitations. NovaTek may restrict the affected workflow or suspend access where reasonably necessary to address misuse or comply with law, with notice and a review route when appropriate. The preview does not reliably detect or block every prohibited entry. Customer eligibility review, operational controls and a tested incident-response procedure remain requirements before public launch. No statement here waives statutory rights, excuses negligence or overrides duties that applicable law imposes on NovaTek or its customers. HIPAA applicability depends on actual activities, data and relationships—not the title of a field or this disclaimer.

Sensitive documents & security requirements

The initial launch excludes medical records and protected health information (PHI). Do not enter patient histories, diagnoses, treatment information, prescriptions, health claims, or identifiable health-plan records in documents, notes, messages, AI prompts or integrations. This restriction also applies to health-related attachments within tax or immigration files. Immigration identity documents and tax records remain planned sensitive-data workflows. The present preview is not approved to store those real records. Before activation, NovaTek must establish tenant-separated authorization, private file storage, encrypted transport and storage, managed keys, malware quarantine, short-lived access links, audit history, administrator MFA, tested backups, deletion workflows and incident response. An encrypted, lockable offline document store and device-loss policy are needed before sensitive files are available offline; browser localStorage is not that store.

NovaTek is not offering a HIPAA-regulated service in this initial launch and does not accept work that requires processing PHI on behalf of a covered entity or business associate. This scope restriction is not a guarantee of exemption: actual data and activities determine applicability. If a proposed use requires HIPAA obligations or a BAA, do not activate that use until it has been separately approved, contracted and secured. A cloud provider’s certification does not certify NovaTek. Tax preparers need a written security program and service-provider oversight where the Safeguards Rule applies. Immigration and insurance businesses remain responsible for applicable professional licensing, authorization, confidentiality and records rules. Do not place card security codes, online banking credentials or unneeded sensitive identifiers in free-text notes.

AI, translation & professional-services disclosure

AI and OCR may misread names, numbers, dates and legal terminology. Always review extracted fields and translations before saving, sending, filing or relying on them. A catalog item is not advice that a government form is appropriate or current. NovaTek is not a government agency, law firm, tax authority, insurer, medical provider or substitute for a licensed professional. The software does not automatically file a return or immigration application, bind insurance, determine eligibility or guarantee financial results. Government charges and professional service fees are separate from a NovaTek subscription.

At launch, disclose when information will be sent to a connected AI service and limit it to the authorized purpose. Sensitive content must not be passed to AI unless the service, contract, configuration and applicable permission support that use. Keep human review for sending messages and consequential actions. Financial statements are only as reliable as the underlying entries; current preview reports contain demonstration data and are not audited accounts.

Email, SMS, WhatsApp & consent

Proposed plans include small eligible messaging allowances. Additional API delivery requires approved prepaid usage; no automatic top-up is enabled. International routes, template categories, number rental and registration require separate disclosed prices. Read messaging allowances, rates and credit terms. The preview does not send or bill these deliveries.

Users must have appropriate authority and channel-specific consent before sending messages. Marketing permission must be optional, recorded and separate from service terms. Identify the sender, respect opt-outs and applicable quiet hours, and maintain suppression records. At launch, SMS programs must support the required STOP/HELP handling and explain expected message frequency and possible carrier charges. WhatsApp business-initiated messaging must use applicable approved templates and permission. No current interface action constitutes permission for NovaTek to start marketing to a contact. Message delivery is not guaranteed.

Service providers & processing agreements

The normal workspace uses generic labels such as Payments, Email and AI. This legal list identifies actual or proposed service providers so businesses can review data handling.

Before production, complete a data-processing agreement identifying scope, purpose, duration, data categories, instructions, confidentiality, security measures, subprocessor authorization and notice, rights-request assistance, incident notification, audit evidence, deletion/return and lawful international transfers. This page is not a signed DPA or BAA. No HIPAA, SOC 2 or universal legal-compliance certification is claimed.

Review before public launch

Have qualified counsel review the final product, customer locations and contracts. Confirm US state privacy applicability, Florida breach duties, subscription-renewal rules, marketing laws, tax and healthcare obligations, and any Haiti-specific requirements. Translate reviewed customer notices into the languages offered, with an appropriate controlling-language provision that respects mandatory local rights. These English drafts do not yet provide legally reviewed French or Haitian Creole notices.

See implementation status, sources and the account checklist →