Privacy Policy

Your account: your name, email and phone; your password, which our sign-in provider stores hashed (we never see it); your shop's name, phone, email, website, address and logo; the people on your team and their roles; and your plan.

Your work: the designs and ambient lighting scenes you make, including the vehicle, kit, star layout, logos and lettering you add, and any photos of headliners or interiors you upload; saved logos, kits, fabrics and favorites.

Your devices: for each browser you sign in on, its type (for example "Chrome on macOS"), an approximate city and region from our hosting provider, and when it was last active, so you can see and sign out devices in Settings.

Client preview links: when you send a link, the design you chose to share, your shop's contact details, how many times it was opened, and any approval or change request (with the message) your client sends.

Contact form: the name, email, shop, phone and message you send us. For rate limiting we keep a one-way hash of the sender's IP address, not the address itself.

• to run NovaMaster: save and sync your designs, print templates, render previews and videos, and show client links;
• to keep accounts secure: sign-in, device lists, rate limits and abuse prevention;
• to bill your plan;
• to answer you when you contact us, and to send account emails (sign-in, password reset, invites, client replies).

• We don't sell your information or your clients' information.
• We don't use advertising trackers or third-party analytics on the app.
• We don't use your designs, logos or photos to train AI models, and we don't show your work to other shops.

Only the service providers that run NovaMaster for us, under their own security and privacy terms:

• Supabase: Database, file storage and sign-in
• Vercel: Hosting the app and website
• Stripe: Payments and billing (card details go straight to Stripe)
• An email delivery service: Sign-in, password reset, team invites and client replies
• Google Fonts: Lettering fonts load from Google the first time you use one

Client preview links are public to anyone who has the link. Each link has a random address that isn't listed anywhere, isn't indexed by search engines, and stops working when you stop sharing it or it expires. We may also disclose information when the law requires it.

We use only the cookies NovaMaster needs: your sign-in session, a short "last seen" marker, and one that remembers onboarding is done (plus a one-hour cookie while you accept a team invite). The app also keeps a copy of your shop's designs and settings in your browser's local storage so it works fast and offline.

We keep your account and work while your account is open. Deleted designs stay in Recently deleted for 30 days, then they're removed for good. Client links you stop sharing are no longer readable.

To close your account, email us from the owner's address. We delete the shop's designs, photos and team within 30 days, except records we must keep by law (like billing records).

You can see and change your details in Settings at any time. You can also ask us for a copy of your information, to correct it, or to delete it through thecontact form. We answer within 30 days. Depending on where you live, you may have more rights under local law, and we honor them.

Every shop's data is walled off from every other shop's at the database level. Read how on our Security page.

NovaMaster is a tool for businesses and isn't meant for anyone under 16. We don't knowingly collect information from children.

If we change this policy in a way that matters, we'll tell account owners by email before the change takes effect.

Master Software Solutions LLC runs NovaMaster. Questions about privacy: use the contact form.