Privacy Policy

NovaDocket is operated by Five Star Finishing Solutions Pty Ltd in Victoria, Australia. In this policy, “NovaDocket”, “we”, “us” and “our” refer to the operator of the NovaDocket service.

Privacy questions, access or correction requests, complaints and deletion requests can be sent to admin@fivestarfinishingsolutions.com.

Depending on the features used, NovaDocket may collect and hold:

• account details such as name, email address, verification status and authentication records;
• business details such as business name, ABN, contact details, addresses, logos, document preferences and payment instructions;
• customer and supplier details entered by subscribers, including names, contact details, addresses and transaction information;
• invoice, estimate, expense, receipt, payment, reconciliation, accountant-access and BAS-preparation information;
• uploaded files and images, including logos, receipts and supporting documents;
• camera, photo-library and file-picker content only when a user chooses to capture or attach a receipt, logo or supporting document;
• subscription and billing records. Complete card details are handled by the relevant payment provider and are not stored by NovaDocket;
• referral-programme records such as referral codes, attribution, reward status and payment-provider credit identifiers;
• document-sharing and activity information, such as whether a shared invoice or estimate link was opened;
• support messages, feature requests and communications with us;
• technical and security information such as device/browser data, IP-derived information, timestamps, logs, identifiers and error records;
• notification permission, delivery and device-registration information when notifications are enabled; and
• connection information for optional providers such as email services, Meta/Facebook/Instagram, payment or accounting providers.

Subscribers are responsible for having authority to enter personal information about their customers, suppliers, workers and accountants into NovaDocket.

We collect information directly when a person registers, configures a business, creates or shares documents, uploads files, connects a provider, requests support or otherwise uses NovaDocket. We may also receive information from an authorised subscriber, a connected provider, a private customer link, or automated security and service logs.

Camera, photo-library, file and notification permissions are optional and requested only when needed for a feature the user selects. NovaDocket does not continuously access the camera or photo library.

We use personal information where reasonably necessary to:

• create and secure accounts, verify identity and provide the requested service;
• create, store, send and manage invoices, estimates, expenses, payments and business records;
• provide customer portals, recipient-view alerts, reminders and communications;
• operate optional accounting, BAS, reconciliation, OCR, mailbox and social-publishing features;
• process subscriptions and referral rewards, prevent fraud, protect the service and investigate misuse;
• provide support, respond to requests and improve reliability and usability;
• meet legal, tax, accounting, dispute-resolution and regulatory obligations; and
• perform aggregated or de-identified analysis that does not reasonably identify an individual.

We do not sell personal information.

When the NovaDocket owner connects Meta, we may receive the Meta user identifier and name, Facebook Page identifiers and names, linked Instagram professional-account details, granted permissions, access tokens, publishing responses, public post links and organic performance metrics.

This information is used to connect the selected business assets, publish owner-approved organic content, confirm public delivery and measure that content. Access tokens are stored as protected server-side secrets and are not returned to the browser. Disconnecting Meta removes or revokes NovaDocket’s stored connection credentials. Public posts already published to Facebook or Instagram remain on those services until removed there.

Optional Meta website measurement is off until you choose “Allow measurement” on the sales or account page. If allowed, our existing Meta Pixel (dataset 1118373364097756) can send a public sales-page view and a trial-start event after your account is verified and a trial is confirmed by our server. Meta may set _fbp and _fbc cookies and receive the public page URL, browser and device information and event time. We do not enable automatic event collection or provide advanced-matching fields to the browser Pixel. We do not place it on invoices, shared documents or private business pages, or in the Android app.

You can select “No thanks” or use “Change privacy choice” on the sales or account page at any time. Declining prevents further optional Meta events and removes the optional Meta cookies. Global Privacy Control and Do Not Track are respected. Your choice does not affect account creation, your trial or essential service analytics.

With optional Meta measurement allowed, when a person arrives through a NovaDocket Meta advertisement and then creates and verifies a trial account, NovaDocket may send Meta a StartTrial conversion event through the Conversions API. The limited matching information comprises a one-way hashed email address and NovaDocket account identifier, Meta click or browser identifiers when present, browser user-agent, event time and the NovaDocket source URL. NovaDocket does not send an IP address in this conversion event and does not store the raw email address, account identifier or browser identifiers in paid-ad reporting tables. This information is used for advertising attribution, measurement and delivery optimisation.

We disclose information only as reasonably required to operate the selected features, comply with law, protect people or the service, or complete a business transfer subject to appropriate safeguards. Providers may include cloud hosting and database services, authentication, email delivery and connected mailboxes, payment processing, analytics and error monitoring, artificial-intelligence processing, Meta/Facebook/Instagram, and optional accounting or financial-data providers.

Core application data is configured in Australian cloud infrastructure where stated in the service. Some providers operate globally and may process limited information in the United States and other countries where they or their subprocessors operate. We take reasonable steps appropriate to the circumstances when using overseas providers.

We use reasonable technical and organisational measures such as encrypted network connections, access controls, tenant and role scoping, protected provider credentials, audit records and backups. No internet service can guarantee absolute security.

Information is retained while needed to provide the service, resolve disputes, protect security and meet legal or business-record obligations. When it is no longer required and no law requires retention, we take reasonable steps to delete or de-identify it. Australian tax, accounting or corporate-record obligations may require some transaction records to be kept after an account closes.

A person may request access to personal information we hold about them or ask for it to be corrected. Subscribers can correct much of their account and business information in NovaDocket. Other requests can be emailed to admin@fivestarfinishingsolutions.com. We may need to verify identity and authority before acting.

Privacy complaints should describe the concern and the outcome sought. We will review the complaint and respond within a reasonable period. If a complaint remains unresolved, a person may contact the Office of the Australian Information Commissioner.

NovaDocket may use cookies, browser storage and similar technologies that are necessary for secure sign-in, session continuity, preferences, fraud prevention and service performance. Blocking essential storage may prevent parts of the service from working.

NovaDocket is a business service and is not directed to children. We may update this policy when the service, providers or legal requirements change. The updated date above shows the current version. Material changes will be communicated where reasonably appropriate.