Privacy Policy

We collect information you provide directly — such as your name, email address, and institution name when you register for NovaCore. We also collect usage data such as login timestamps, document actions, and workflow events to power audit trails and analytics within your account.

Your information is used solely to operate and improve the NovaCore platform. We use it to authenticate your identity, enforce role-based access controls, deliver notifications, generate audit logs, and provide support. We do not use your data for advertising.

Every institution on NovaCore operates in a fully isolated data environment. Documents, workflows, users, and records belonging to your organization are never accessible to other organizations — or to NovaCore staff — outside of explicit support interactions you authorize.

We retain your data for as long as your subscription is active. Upon account termination, your data is retained for 30 days to allow export, then permanently deleted from all systems including backups. You may request early deletion at any time.

NovaCore uses a limited set of third-party infrastructure providers (hosting, email delivery, error monitoring). These providers process data only as instructed by us and are contractually prohibited from using your data for their own purposes.

All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Access to production systems is restricted to authorized personnel only. We conduct regular security reviews and maintain incident response procedures.

You have the right to access, correct, export, or delete your personal data at any time. Institutional administrators can manage user data directly within the platform. For requests beyond what the platform supports, contact us at privacy@novacorecloud.com.

For privacy-related questions or requests, contact our team at privacy@novacorecloud.com. We respond to all inquiries within 5 business days.