Privacy Policy
Nova Essentials ("we," "us," "our") is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and your rights regarding it.
1. Information We Collect
Account information: When you register, we collect your email address and a hashed password. We do not store your password in plain text.
Payment information: Payments are processed by Stripe. We do not store your credit card number, expiry date, or CVV. We receive only a Stripe customer ID and subscription status.
Usage data: We may collect anonymized data about how you use the Service (e.g., pages visited, filters used) to improve the platform. This data is not linked to your identity.
Communications: If you contact us by email or through our contact form, we retain that correspondence to respond to you.
What we do NOT collect: We do not collect your trade licence number, business registration, physical address, or any government-issued identification.
2. How We Use Your Information
- To create and manage your account
- To process payments and manage your subscription via Stripe
- To send transactional emails (account creation, trial reminders, payment receipts)
- To respond to support requests
- To improve the Service based on usage patterns
We do not sell your personal information to third parties. We do not use your information to send unsolicited marketing to third parties on your behalf.
3. Permit Data & Homeowner Privacy
The permit lead data displayed in the Service consists of public records sourced from government open data portals (City of Toronto Open Data; NYC Open Data). This information was voluntarily submitted to government authorities by property owners as part of the permit application process and is publicly available under applicable open data licences.
Nova Essentials does not add, enrich, or cross-reference this public data with private personal data sources. Property owner names, where they appear, are included solely because they are part of the public permit record.
4. Cookies & Analytics
We use Google Analytics (gtag.js) to understand aggregate traffic patterns on novaessentials.ca. Google Analytics uses cookies to distinguish users. You can opt out using the Google Analytics Opt-out Browser Add-on.
We do not use advertising cookies or cross-site tracking cookies.
5. Data Sharing
We share your personal information only with:
- Stripe — for payment processing. Stripe's privacy policy applies to information you provide during checkout.
- Supabase — our database provider, which stores your account data on servers in the United States. Supabase is SOC 2 Type II certified.
- Government authorities — if required by law, court order, or to protect our legal rights.
6. Data Retention
We retain your account information for as long as your account is active. If you close your account, we will delete your personal data within 90 days, except where we are required to retain it for legal or financial compliance purposes (e.g., Stripe payment records).
7. Your Rights
Depending on where you are located, you may have rights to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your personal information
- Withdraw consent for communications (unsubscribe from emails)
To exercise any of these rights, email leads@novaessentials.ca. We will respond within 30 days.
8. Canadian Users (PIPEDA)
Nova Essentials is based in Ontario, Canada, and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA). Your personal data is collected only with your knowledge and consent, used only for the purposes described in this policy, and protected by reasonable security safeguards.
9. US Users
If you are located in the United States, your data may be processed and stored in Canada or the United States. By using the Service, you consent to this transfer. We do not sell personal information as defined under the California Consumer Privacy Act (CCPA).
10. Security
We use industry-standard security measures including TLS encryption in transit, hashed password storage, and role-based access controls. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email at least 14 days before they take effect.
12. Contact
Privacy questions or requests? Email leads@novaessentials.ca.