Is CareNova production-ready or just a prototype?

CareNova ships with a real Supabase PostgreSQL schema, Drizzle ORM migrations, and Server Actions with server-side role enforcement. It is a production-quality foundation—not a mockup.

Can I use it to build a SaaS and charge users?

Yes, with the Extended License. The architecture is multi-tenant ready with clinic anchor tables and UUID keys.

What tech stack does CareNova use?

CareNova uses Next.js 14 (App Router), Supabase (Auth & Postgres), Drizzle ORM, and Tailwind CSS.

Privacy Policy | CareNova | CareNova Healthcare SaaS

Welcome to CareNova ("we," "our," "us," or "CareNova"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your information when you visit our website (including carenovasoftware.com and any subdomains), use our demo application, access our documentation or support channels, purchase a license through CodeCanyon, or otherwise interact with our services (collectively, the "Services"). Please read this policy carefully. By using our Services, you agree to the practices described in this policy.

1. Who We Are and Scope

CareNova is a clinic management software product. This Privacy Policy applies to:

Our marketing and landing website.
Our live demo application (app.carenovasoftware.com and related demo environments).
Our documentation and help resources (e.g., carenova.featurebase.app).
Our contact, support, and communication channels.
Any other services we offer that link to or reference this policy.

This policy does not apply to data you collect, store, or process using CareNova software after you install and run it on your own infrastructure. In that case, you are the data controller and responsible for your own privacy practices and policies.

2. Information We Collect

We collect information you provide directly to us and information we obtain automatically when you use our Services.

2.1 Information You Provide

Contact and identity: Name, email address, and any other details you give when you fill out our contact form, request support, or subscribe to updates.
Purchase and license: When you purchase through CodeCanyon (Envato), Envato processes payment. We may receive purchaser identity, email, purchase date, license type (Regular or Extended), and license details to deliver the product and provide item support.
Communications: Content of support tickets, emails, chat messages, or feedback you send to us.
Demo or account data: If you create an account or use our demo environment, we may store credentials, preferences, and usage data tied to that demo account.

2.2 Information Collected Automatically

Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and similar technical identifiers.
Usage data: Pages visited, time spent, click paths, referring URLs, and general interaction with our website and demo.
Log data: Server logs, access times, and error or security-related events.

We may use cookies, local storage, and similar technologies to collect some of this information. See Section 8 for details.

2.3 Information From Third Parties

Envato / CodeCanyon: Purchase and license information so we can deliver the product and provide support as per the item support terms.
Analytics and hosting providers: Aggregated or pseudonymized usage and performance data from services we use to operate and improve our Services.

3. How We Use Your Information

We use the information we collect to:

Provide the Services: Operate the website, demo, documentation, and support; deliver and verify licenses; respond to inquiries and support requests.
Process and support purchases: Fulfill orders, send license details and download links, and provide the item support included with your purchase (e.g., 6 months as stated on our product page).
Communicate with you: Send transactional messages (e.g., purchase confirmations, license information, support replies) and, where you have opted in, product updates, security notices, or marketing (you can opt out at any time).
Improve and personalize: Analyze usage to improve our website, product, and documentation; personalize content where applicable.
Security and compliance: Protect against fraud, abuse, and security incidents; enforce our Terms of Use; comply with legal obligations and lawful requests from authorities.
Legal and business purposes: Establish or defend legal claims; conduct internal reporting and analytics; support a merger, acquisition, or sale of assets (with notice as required by law).

We do not use your personal information for fully automated decision-making that has legal or similarly significant effects on you, except where permitted by law (e.g., fraud prevention).

4. Legal Basis for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following bases:

Contract: To perform our contract with you (e.g., delivering the product and support you purchased).
Legitimate interests: To operate and improve our Services, prevent fraud, ensure security, and communicate about your purchase or support, where our interests are not overridden by your rights.
Consent: Where we rely on consent (e.g., marketing emails), you may withdraw it at any time.
Legal obligation: Where we must process data to comply with applicable law.

5. Sharing and Disclosure of Your Information

We do not sell your personal information. We may share your information only as follows:

Service providers: With vendors that help us run our Services (e.g., hosting, email, analytics, support tools). They are bound by contract to use data only for the purposes we specify and to protect it appropriately.
Envato / CodeCanyon: As necessary to verify purchases, deliver licenses, and provide item support in line with Envato’s and our terms.
Legal and safety: When required by law, court order, or government request; to protect our or others’ rights, safety, or property; to enforce our Terms of Use or other agreements.
Business transfer: In connection with a merger, acquisition, reorganization, or sale of assets, with notice and any choices required by law.

We do not share your personal information with third parties for their own marketing purposes.

6. International Transfers

We may store and process information in countries other than your country of residence, including countries that may not provide the same level of data protection. When we transfer personal data from the EEA, UK, or other restricted jurisdictions, we use appropriate safeguards (e.g., standard contractual clauses, adequacy decisions) as required by applicable law.

7. Data Retention

We retain your personal information only as long as necessary to:

Fulfill the purposes described in this policy.
Provide product and item support (e.g., for the support period included with your license).
Comply with legal, tax, or regulatory obligations.
Resolve disputes and enforce our agreements.

After that, we delete or anonymize the data. Some data may be retained in backup or log systems for a limited additional period for security or operational reasons.

8. Cookies and Similar Technologies

We use cookies and similar technologies (e.g., local storage) for:

Strictly necessary: Required for the website and demo to function (e.g., session, security).
Preferences: To remember your settings and choices.
Analytics and performance: To understand how visitors use our site (e.g., page views, traffic sources). We use this in a way that does not identify you personally where possible.

You can control non-essential cookies through your browser settings. Blocking certain cookies may affect site functionality. We do not currently respond to Do Not Track signals; we treat all visitors consistently under this policy.

9. Third-Party Links and Services

Our website or documentation may contain links to third-party sites (e.g., CodeCanyon, Envato, documentation or community platforms). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal information.

10. Security

We implement administrative, technical, and physical measures to protect your personal information against unauthorized access, loss, alteration, or disclosure. These include access controls, encryption where appropriate, and secure hosting. No method of transmission or storage over the internet is completely secure; we strive to follow industry standards and improve our practices over time.

11. Your Rights and Choices

Depending on where you live, you may have the right to:

Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal information, subject to legal exceptions.
Restriction: Request that we limit how we use your data in certain circumstances.
Portability: Request a copy of your data in a structured, machine-readable format where applicable.
Object: Object to processing based on legitimate interests or for direct marketing.
Withdraw consent: Where we rely on consent, withdraw it at any time.
Complain: Lodge a complaint with a supervisory authority in your country.

To exercise any of these rights, contact us at dev010contact@gmail.com. We will respond within the time required by applicable law (e.g., 30 days under many laws). We may need to verify your identity before processing your request.

California residents: In addition to the above, you may have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, correct, and opt out of “sale” or “sharing” of personal information. We do not sell or share personal information as defined under the CCPA. You may designate an authorized agent to submit requests on your behalf.

Nevada residents: You may opt out of the sale of certain covered information. We do not currently sell such information.

12. Children’s Privacy

Our Services are not directed to individuals under the age of 16 (or higher where required by local law). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last Updated" date. For material changes, we may also notify you by email or a prominent notice on our website. Your continued use of our Services after the effective date of the changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: dev010contact@gmail.com
Contact form: Contact Us

We will respond as soon as practicable and in any event within the timeframes required by applicable law.