Effective Date: June 3, 2026
Last Updated: June 3, 2026
Last Reviewed: June 3, 2026
Next Review Due: December 3, 2026
This Privacy Policy describes how Novaica LLC ("Novaica," "we," "us," or "our") collects, uses, shares, and protects information about you when you visit our website, use our platform, or engage with our services. By using our services, you agree to the practices described in this policy.
1. Information We Collect
We collect information you provide directly to us and information collected automatically when you use our services.
1.1 Information You Provide
- Account information: Name, email address, phone number, business name, and trade type when you register or sign up.
- Payment information: Billing details processed securely through Stripe. We do not store your full card number.
- Business content: Photos, logos, business descriptions, service information, and customer data you upload to our platform.
- Communications: Emails, support requests, and messages you send us.
- Form submissions: Information submitted through contact, quote request, or onboarding forms.
1.2 Information Collected Automatically
- Usage data: Pages visited, features used, time spent, clicks, and navigation patterns.
- Device information: Browser type, operating system, IP address, and device identifiers.
- Cookies and tracking technologies: Session cookies, analytics cookies, and preference cookies.
1.3 Information from Third Parties
- Payment processors: Transaction and billing information from Stripe.
- Analytics providers: Aggregated usage and behavior data from Google Analytics.
- Marketing platforms: Lead and conversion data from advertising platforms.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, maintain, and improve our services.
- Process payments and manage your subscription.
- Build and manage your website, CRM, automations, and review funnel.
- Send service-related communications including invoices, updates, and onboarding instructions.
- Respond to your questions, support requests, and feedback.
- Analyze usage patterns to improve our platform and features.
- Send marketing communications (you may opt out at any time).
- Comply with legal obligations and enforce our Terms of Service.
- Detect and prevent fraud, abuse, and security incidents.
We do not sell your personal information to third parties.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:
- Performance of a contract: Processing necessary to provide our services under our Terms of Service.
- Legitimate interests: Analytics, fraud prevention, and improving our services.
- Consent: For marketing communications and non-essential cookies.
- Legal obligation: Where we are required to process data by applicable law.
4. Information Sharing
We may share your information with:
- Service providers: Third-party companies that help us operate our services, including GoHighLevel (CRM/platform), Stripe (payments), Twilio (SMS/voice), Mailgun (email), Google (analytics and advertising), and Ahrefs/Semrush (SEO tools). All service providers are bound by confidentiality obligations.
- Analytics providers: Tools that help us understand how our services are used (e.g., Google Analytics).
- Legal requirements: When required by law, court order, or government authority.
- Business transfers: In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.
- Protection of rights: To protect the rights, property, or safety of Novaica, our clients, or others.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to improve your experience on our website.
Types of cookies we use:
- Essential cookies: Required for the website and platform to function properly. Cannot be disabled.
- Analytics cookies: Help us understand visitor behavior and improve our services (e.g., Google Analytics).
- Marketing cookies: Used to track ad performance, conversions, and retargeting (e.g., Facebook Pixel, Google Ads).
- Preference cookies: Remember your settings and choices.
You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. To opt out of Google Analytics tracking, visit tools.google.com/dlpage/gaoptout.
6. SMS and Email Communications
If you opt in to receive SMS or email communications from us, we may send you:
- Service updates, invoices, and account notifications.
- Onboarding instructions and support communications.
- Marketing offers and promotional content (with your consent).
To opt out of SMS, reply STOP to any message. To opt out of marketing emails, click the unsubscribe link in any email. Standard message and data rates may apply.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. After account cancellation:
- Account data is retained for 30 days in case of reactivation, then deleted or archived.
- Financial records are retained for 7 years as required by law.
- Backup copies may be retained for up to 90 days after deletion.
- You may request deletion of your data at any time by contacting us at [email protected].
8. Data Security
We implement industry-standard security measures to protect your information, including:
- SSL/TLS encryption for all data in transit.
- Encryption of sensitive data at rest.
- Role-based access controls limiting who can access your data.
- Regular security assessments and vulnerability monitoring.
- Secure backup procedures with regular testing.
- Staff training on data protection and security practices.
No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Receive your data in a structured, machine-readable format.
- Restriction: Request that we limit the processing of your data in certain circumstances.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Opt-out of sale: California residents have the right to opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, contact us at [email protected] or call 631-652-9973. We will respond within 30 days.
10. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know: What personal information we collect, use, disclose, and sell.
- Right to delete: Your personal information, subject to certain exceptions.
- Right to correct: Inaccurate personal information.
- Right to opt out: Of the sale or sharing of personal information. We do not sell personal information.
- Right to limit use: Of sensitive personal information.
- Non-discrimination: We will not discriminate against you for exercising your privacy rights.
To submit a CCPA request, email [email protected] with the subject line "CCPA Request."
11. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will delete it promptly. If you believe we have collected information from a child, please contact us at [email protected].
12. Third-Party Links and Services
Our website and platform may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you use. Our primary integrations include GoHighLevel, Stripe, Twilio, Mailgun, Google, Canva, Ahrefs, Meta, and Semrush.
13. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws, using appropriate safeguards including Standard Contractual Clauses where required by GDPR. By using our services, you consent to the transfer of your information to the United States and other countries where we operate.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The "Last Updated" date at the top of this policy reflects the most recent revision. Your continued use of our services after the effective date of any changes constitutes acceptance of the updated policy.
15. Contact
Novaica LLC
Email: [email protected]
Phone: 631-652-9973
Web: novaica.com