Privacy Policy

Last updated: October 27, 2026

Novacraft ("we", "us") is a small design and development studio based in Canada. This policy explains, in plain language, what personal information we collect through novacraft.ca, why, and what you can do about it. We follow Canada's privacy law for businesses (PIPEDA).

What we collect

• Contact form: your name, email address, and message.
• Orders: your name, email address, billing province, and what you ordered. Payments are processed by Stripe. We never see or store your full card number.
• Website Rescue: your website address, the builder you use, and the access you give us as a collaborator. We use that access only for your rescue, and you can remove it at any time.
• Website Health Plan: your website address, name, email, and the results of our hourly, daily and monthly checks, kept for as long as you're subscribed and up to two years after.
• Code reviews: what you tell us in your request, the authorization you sign (your name, role, business, email, the date and time, and your IP address), payment records, and the code you share with us. See "Code you send us for review" below.
• Free Website Check: the website address you submit, your email address, the report type you choose, and the results of the scan.
• Analytics: Google Analytics uses cookies to tell us how visitors use the site (pages viewed, rough location, device type). It does not tell us who you are.
• Server logs: our host keeps standard logs (IP address, browser, pages requested) for security and to prevent abuse.

Why we use it

• To reply to your message and deliver what you ordered.
• To run your free website check and email you the report.
• To prevent spam and abuse, for example limiting free reports to one per email and website.
• To understand how the site is used so we can improve it.
• To send you follow-up messages only if you agreed to hear from us. You can unsubscribe at any time.

Who we share it with

We do not sell your information. We only share it with the services that help us run the business:

• Stripe: payment processing
• Hostinger: website hosting and email
• Google: Google Analytics, plus the PageSpeed Insights service used to scan the website you submit for a free check

Some of these providers may store data outside Canada, including in the United States.

Code you send us for review

• We use your code only to carry out the review you asked for. We don't sell it, share it, or use it for anything else.
• Uploaded code is stored outside the public website, with access limited to Novacraft. We review it on our own secured computers, and we never run it on a public server.
• We may use automated and AI-assisted analysis tools to help with the review. We only use tools whose terms don't allow your code to be used to train their models.
• If your code contains passwords, keys, or personal information about your customers, we won't use them, and we'll let you know so you can change them.
• We delete uploaded code within 30 days of delivering your report, or sooner if you ask. If you shared a repository, you can remove our access at any time. We keep the report and your signed authorization as business records.

How long we keep it

We keep contact messages and website-check records for up to two years, and order records for as long as Canadian tax law requires (generally six years). After that, we delete them.

Your choices and rights

• You can ask to see the personal information we hold about you, correct it, or have it deleted.
• You can withdraw consent to marketing emails at any time by replying "unsubscribe" or emailing us.
• You can block or delete cookies in your browser settings.

Security

The site uses HTTPS encryption. Payment details are handled entirely by Stripe, and access to our records is limited to Novacraft.

Contact

Questions or requests: contact@novacraft.ca. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.