Back

Privacy Policy

Novek Technologies Pty Ltd · Effective Date: 2026

“We treat privacy, confidential engineering data protection, and transparent handling as foundational pillars of our platform.”

— Novek Privacy Team

Entity Identification & Purpose

This Privacy Policy explains how Novek Technologies Pty Ltd (ABN 99 701 690 682), trading as Novek (“Novek”, “we”, “us” or “our”), collects, uses, stores, discloses and protects personal information when you use our websites, applications, products and services.

Novek provides engineering document intelligence software that may process engineering documents, technical drawings, datasheets, specifications, project records, user-provided content and related structured engineering information.

Depending on how Novek is used, the information we process may include account information, contact details, uploaded documents, document metadata, extracted engineering information, user corrections and review actions, support communications, usage information and technical logs.

We process information only for purposes connected with providing, securing, maintaining and improving the Novek services, meeting our contractual obligations, complying with applicable law and supporting our customers.

1. Information We Collect

Account & Contact Details:Name, corporate email address, organization name, department, role, and authentication tokens (e.g. via Microsoft Entra ID or enterprise SSO).
Uploaded Engineering Documents:Technical files submitted by users, including Piping & Instrumentation Diagrams (P&IDs), equipment datasheets, piping specifications, vendor documentation, and project records.
Document Metadata:File titles, drawing numbers, sheet revisions, coordinates, document dimensions, and upload timestamps.
Extracted Engineering Information:Structured objects, tag names, instrument attributes, line numbers, connectivity graphs, and generated registers.
User Corrections & Review Actions:Human-in-the-loop (HITL) annotations, tag verifications, manual edits, and approval timestamps used to maintain deliverable accuracy and audit logs.
Technical Logs & Usage Data:IP addresses, browser/device characteristics, API request logs, and session diagnostic data.

2. How We Use Your Data & Purpose

• Authenticate users and enforce tenant-level role-based access control (RBAC).

• Parse drawings and documents to extract engineering tags, attributes, and line data.

• Enable source-linked human review and maintain immutable verification audit trails.

• Export structured registers, line lists, and engineering deliverables.

• Monitor system performance, uptime, and infrastructure security.

Zero Public Model Training Guarantee:

We never use your uploaded engineering documents, proprietary drawings, extracted tags, or confidential project data to train public foundation models or third-party AI models.

3. Subprocessors & Cloud Infrastructure

We use enterprise cloud infrastructure providers (such as Google Cloud Platform and Microsoft Azure) to host application services, databases, and secure object storage. Data is logically separated with strict organization-level isolation boundaries.

When machine learning models are invoked to extract text, symbols, or structured relationships, requests are processed via enterprise API agreements that prohibit model providers from retaining customer data or using customer inputs for training.

4. Data Storage, Security & International Processing

Encryption: All customer data is encrypted in transit using TLS 1.2+ and at rest using industry-standard AES-256 encryption.

Access Controls: Granular role-based access control (RBAC) and least-privilege administrative access policies.

Data Localization: Where required by enterprise contract, dedicated VPC or regional storage configurations can be aligned with customer data residency requirements.

5. Retention, Deletion & Customer Data Ownership

Customers maintain full ownership and control over their uploaded engineering files and extracted outputs. You can delete uploaded files, project workspaces, and extracted data directly via the application.

Upon termination of service or upon verified request by an authorized account administrator, we will purge customer data from active databases in accordance with our retention schedules and contractual commitments.

6. Your Privacy Rights

• Access and review the personal information and engineering workspaces linked to your account.

• Request correction of inaccurate account records.

• Request export or deletion of your account data.

• Withdraw consent where processing relies on specific consent mechanisms.

7. Cookies & Session Management

We use essential session tokens and authentication cookies strictly required to keep users logged in and enforce security controls. We do not use third-party behavioral advertising cookies across our authenticated application.

8. Contact & Privacy Officer

Novek Technologies Pty Ltd

ABN: 99 701 690 682

Location: Melbourne, Victoria, Australia

For questions, privacy requests, or Data Protection Officer inquiries: support@novek.ai