Privacy Policy

Effective date (draft): June 25, 2026 · Last updated: June 25, 2026

Novaude, Inc. ("Novaude," "we," "us," or "our") helps small and medium businesses build funding readiness. This Privacy Policy describes how we collect, use, disclose, and retain information when you visit novaude.com, join our founding cohort waitlist, create an account, or use our platform at app.novaude.com.

Your business details stay private until you choose to share them. Providers can only reach you when you accept a connection request.

Information We Collect

Founding Cohort Waitlist (Pre-Launch)

When you submit the form at /join, we collect:

• Contact name
• Email address
• Business name
• Business ZIP code (optional — used to assign a metro market cohort)
• Marketing consent timestamp

Attribution and Referral Data

We record how you arrived so we can measure channel performance and honor referral or sponsor relationships. This may include query parameters such as utm_source, utm_medium, utm_campaign, ref (peer referral code), and sponsor (advisor/sponsor code). These values are stored with your lead record in our internal CRM.

Account and Platform Use (Post-Cutover)

When you create an account and use Novaude, we also collect account credentials (via Firebase Authentication), profile and assessment responses for the Business Funding Readiness Index (BFRI), subscription and billing information (processed by Braintree), usage logs, and documents you upload for verification. Gate 3 cutover will require counsel review of live-funnel disclosures for this section.

How We Use Information

We use the information above to:

• Place you in the correct metro market cohort and send launch updates
• Deliver transactional and marketing email via Resend (from addresses such as notifications@novaude.com)
• Attribute signups to referral, sponsor, or direct marketing channels
• Operate, secure, and improve the Novaude platform
• Calculate readiness scores and connect you with providers when you opt in

Email and Communications

Waitlist confirmation and launch emails are sent only after you check the marketing consent box on /join. Every marketing email includes an unsubscribe mechanism. Transactional messages (for example, password reset) may be sent without separate marketing consent where permitted by law.

CAN-SPAM: Our email footers include a physical mailing address (NOVAUDE_POSTAL_ADDRESS in production configuration). Counsel must confirm the address before B3 cold email sends.

Third-Party Service Providers

We use service providers that process data on our behalf, including:

• Firebase (Google) — authentication
• Resend — email delivery
• Braintree — payment processing (post-cutover trial and subscription)
• Google Cloud — application hosting and database

These providers are bound by their own privacy policies and our data processing agreements where applicable.

Cold Outreach and Purchased Lists (Gate 2 — Counsel Review)

Novaude may send commercial email to business contacts acquired through purchased or rented lists (B3 direct email channel) only after counsel approves this policy and applicable CAN-SPAM, TCPA, and state privacy requirements. B3 cold email is blocked operationally until Gate 2 counsel sign-off — no automated B3 sends are enabled in product code.

Counsel action required: Lawful basis for cold B2B email, list hygiene standards, opt-out handling, and any state-specific disclosures (CCPA/CPRA, etc.).

Retention

Waitlist lead data is retained in our CRM for up to 24 months or until you unsubscribe or request deletion, whichever comes first. Account data is retained while your account is active and as required for legal, tax, and fraud-prevention purposes.

Your Choices and Rights

You may unsubscribe from marketing emails using the link in any marketing message. You may request access to, correction of, or deletion of your personal information by contacting privacy@novaude.com. We will respond within a reasonable time as required by applicable law.

Security

We use industry-standard measures to protect data in transit and at rest. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

Children

Novaude is intended for business owners and is not directed to children under 16. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated by email where required by law.

Contact Us

Questions about this Privacy Policy: privacy@novaude.com