Privacy Policy

NovaDocket is operated by Five Star Finishing Solutions Pty Ltd in Victoria, Australia. In this policy, “NovaDocket”, “we”, “us” and “our” refer to the operator of the NovaDocket service.

Privacy questions, access or correction requests, complaints and deletion requests can be sent to admin@fivestarfinishingsolutions.com.

Depending on the features used, NovaDocket may collect and hold:

• account details such as name, email address, verification status and authentication records;
• business details such as business name, ABN, contact details, addresses, logos, document preferences and payment instructions;
• customer and supplier details entered by subscribers, including names, contact details, addresses and transaction information;
• invoice, estimate, expense, receipt, payment, reconciliation, accountant-access and BAS-preparation information;
• uploaded files and images, including logos, receipts and supporting documents;
• camera, photo-library and file-picker content only when a user chooses to capture or attach a receipt, logo or supporting document;
• subscription and billing records. Complete card details are handled by the relevant payment provider and are not stored by NovaDocket;
• document-sharing and activity information, such as whether a named recipient opened a protected invoice or estimate link;
• support messages, feature requests and communications with us;
• technical and security information such as device/browser data, IP-derived information, timestamps, logs, identifiers and error records;
• notification permission, delivery and device-registration information when notifications are enabled; and
• connection information for optional providers such as email services, Meta/Facebook/Instagram, payment or accounting providers.

Subscribers are responsible for having authority to enter personal information about their customers, suppliers, workers and accountants into NovaDocket.

We collect information directly when a person registers, configures a business, creates or shares documents, uploads files, connects a provider, requests support or otherwise uses NovaDocket. We may also receive information from an authorised subscriber, a connected provider, a protected customer link, or automated security and service logs.

Camera, photo-library, file and notification permissions are optional and requested only when needed for a feature the user selects. NovaDocket does not continuously access the camera or photo library.

We use personal information where reasonably necessary to:

• create and secure accounts, verify identity and provide the requested service;
• create, store, send and manage invoices, estimates, expenses, payments and business records;
• provide customer portals, recipient-view alerts, reminders and communications;
• operate optional accounting, BAS, reconciliation, OCR, mailbox and social-publishing features;
• process subscriptions, prevent fraud, protect the service and investigate misuse;
• provide support, respond to requests and improve reliability and usability;
• meet legal, tax, accounting, dispute-resolution and regulatory obligations; and
• perform aggregated or de-identified analysis that does not reasonably identify an individual.

We do not sell personal information.

When the NovaDocket owner connects Meta, we may receive the Meta user identifier and name, Facebook Page identifiers and names, linked Instagram professional-account details, granted permissions, access tokens, publishing responses, public post links and organic performance metrics.

This information is used only to connect the selected business assets, publish owner-approved organic content, confirm public delivery and measure that content. Access tokens are stored as protected server-side secrets and are not returned to the browser. Disconnecting Meta removes or revokes NovaDocket’s stored connection credentials. Public posts already published to Facebook or Instagram remain on those services until removed there.

We disclose information only as reasonably required to operate the selected features, comply with law, protect people or the service, or complete a business transfer subject to appropriate safeguards. Providers may include cloud hosting and database services, authentication, email delivery and connected mailboxes, payment processing, analytics and error monitoring, artificial-intelligence processing, Meta/Facebook/Instagram, and optional accounting or financial-data providers.

Core application data is configured in Australian cloud infrastructure where stated in the service. Some providers operate globally and may process limited information in the United States and other countries where they or their subprocessors operate. We take reasonable steps appropriate to the circumstances when using overseas providers.

We use reasonable technical and organisational measures such as encrypted network connections, access controls, tenant and role scoping, protected provider credentials, audit records and backups. No internet service can guarantee absolute security.

Information is retained while needed to provide the service, resolve disputes, protect security and meet legal or business-record obligations. When it is no longer required and no law requires retention, we take reasonable steps to delete or de-identify it. Australian tax, accounting or corporate-record obligations may require some transaction records to be kept after an account closes.

A person may request access to personal information we hold about them or ask for it to be corrected. Subscribers can correct much of their account and business information in NovaDocket. Other requests can be emailed to admin@fivestarfinishingsolutions.com. We may need to verify identity and authority before acting.

Privacy complaints should describe the concern and the outcome sought. We will review the complaint and respond within a reasonable period. If a complaint remains unresolved, a person may contact the Office of the Australian Information Commissioner.

NovaDocket may use cookies, browser storage and similar technologies that are necessary for secure sign-in, session continuity, preferences, fraud prevention and service performance. Blocking essential storage may prevent parts of the service from working.

NovaDocket is a business service and is not directed to children. We may update this policy when the service, providers or legal requirements change. The updated date above shows the current version. Material changes will be communicated where reasonably appropriate.