Nova assistant
HomeFeaturesHow It WorksPricingFAQ
Sign in

Privacy policy

Last updated: April 18, 2025

At Nova, we prioritize your privacy. This Privacy Policy explains how we handle your personal data. By accessing or using our Services in any manner, you agree to the practices and policies outlined below, and consent to our collection, use, and sharing of your information as described in this Privacy Policy.

Your use of Nova's Services is always subject to our Terms of Use, which incorporates this Privacy Policy. Any terms used in this Policy without definition have the meanings given in the Terms of Use.

Scope of This Privacy Policy

This Privacy Policy explains how we treat Personal Data collected when you access or use our Services. «Personal Data» refers to any information that identifies or relates to a specific individual, including information termed «personally identifiable information» or «personal information» under applicable data privacy laws. This Privacy Policy does not cover practices of companies we don't own or control, or individuals we don't manage. Additionally, it does not cover Personal Data we process on behalf of our customers when acting as their service provider.

Personal Data

Types of Personal Data We Collect

Below is a summary of the categories of Personal Data we have collected over the past 12 months:

  • Profile or Contact Information: Name, email address, phone number, and mailing address
  • Payment Information: Payment card type, last 4 digits of payment card, billing address, phone number, and email
  • Device and IP Data: IP address, device ID, domain server, and information about your device, operating system, and browser
  • Web Analytics: Page interactions and referring sources through which you accessed the Services
  • Location Data: Information about your location derived from your IP address
  • Shipping Information: Shipping address for deliveries
  • Social Network Information: Username, language preferences, gender, timezone, and profile picture
  • Demographic Information: Gender and other demographic details you provide
  • Derived Information: Profiles reflecting your attributes or behavior based on collected data
  • Voluntary Information: Any identifying information you choose to provide in communications

Sources of Personal Data

We gather Personal Data from these sources:

  • Directly From You
    • When you provide information intentionally:
      • During account creation or when using our interactive features
      • When you enter information in text fields, surveys, or questionnaires
      • When you contact us through email or other means
    • When information is collected automatically during your use of our Services:
      • Through cookies and similar technologies (described in the «Tracking Technologies» section)
      • From location-enabled browsers when permitted
  • From Third Parties
    • Service Providers:
      • Analytics providers that help us understand how you interact with our Services, and support providers that assist with customer service
    • Marketing Partners:
      • Vendors who assist with marketing and promotional activities and provide information about your interactions with our digital properties and communications
    • Social Media Platforms:
      • When you connect social accounts or sign in through third-party platforms, certain content or information may transfer to your Nova account

Why We Collect Personal Data

  • Service Provision and Improvement
    • Managing your account and user profiles
    • Processing transactions and handling billing
    • Delivering requested products, services, and information
    • Fulfilling the purpose for which you provided the information
    • Providing support for our Services
    • Enhancing our Services through research, testing, and development
    • Customizing content and communications based on your preferences
    • Implementing security measures and debugging
    • Conducting business activities as disclosed when collecting your data or as permitted by applicable laws like the California Consumer Privacy Act (CCPA)
  • Marketing
    • Promoting and selling our Services to you and others
  • Communication
    • Responding to your inquiries, contacting you when necessary, and providing information about Nova and our Services
    • Sending communications aligned with your preferences or featuring content we believe will interest you
  • Legal Compliance and Enforcement
    • Meeting legal obligations under applicable laws, regulations, court orders, or legal processes
    • Protecting the rights, property, or safety of you, Nova, or others
    • Enforcing our agreements with you
    • Addressing claims about third-party rights violations
    • Resolving disputes of any kind

We will notify you before collecting additional categories of Personal Data or using your data for purposes significantly different from those disclosed here.

How We Share Your Personal Data

We share your Personal Data with the service providers and parties listed below. Depending on applicable state laws, some of these disclosures might constitute a «sale» of your Personal Data. For specifics, please refer to the state-specific sections below.

  • Service Providers who help deliver our Services or perform functions on our behalf, including:
    • Hosting, technology, and communication service providers
    • Security specialists and fraud prevention consultants
    • Customer support and service vendors
    • Product fulfillment and delivery services
    • Payment processors
      • Our payment processing partner Stripe, Inc. («Stripe») collects payment card information needed to process your payments
      • For details on how Stripe handles your data, please review their terms of service and privacy policy
  • Advertising Partners who help market our services and provide relevant offers, including:
    • Advertising networks
    • Marketing service providers
  • Analytics Partners who analyze Service usage and traffic, including:
    • Companies tracking how users discover our Services
    • Companies monitoring user interactions with our Services
  • Third Parties You Authorize including:
    • Services you access through our platform
    • Connected social media platforms
    • Other users when relevant

Legal Obligations

We may share your Personal Data with third parties to fulfill legal requirements and enforce terms as outlined in the «Legal Compliance and Enforcement» section above.

Business Transfers

If Nova undergoes a merger, acquisition, bankruptcy, or other transaction transferring control of our business, your Personal Data may transfer to the third party involved. In such cases, we'll make reasonable efforts to inform you before your information becomes subject to different policies.

Non-Personal Data

We may create aggregated, de-identified, or anonymized data by removing personally identifying elements. We may use and share such data for legitimate business purposes including analysis, service improvements, and business promotion, provided we do not share it in a way that could identify you.

Tracking Technologies and Your Choices

Our Services employ cookies and similar technologies such as pixel tags, web beacons, clear GIFs, and JavaScript (collectively, «Tracking Technologies») to recognize your browser, track usage patterns, analyze trends, manage user base, and improve our Services. These are typically small data files placed on your device when you access our Services. We may supplement information collected through these technologies with data from third parties who have placed their own tracking technologies on your devices. Due to our use of these technologies, our Services currently do not support «Do Not Track» browser requests.

We use these types of Tracking Technologies:

  • Essential Technologies required for requested features and services, such as enabling secure login areas. Disabling these may make certain features unavailable.
  • Preference Technologies that record your choices and settings, maintain preferences, and enhance your experience by recognizing you upon return and personalizing content.
  • Analytics Technologies that help us understand how visitors use our Services by collecting information about visitor numbers, page views, and viewing duration. These also help measure advertising campaign performance and improve content relevance. For example, Google Analytics collects information about your visits subject to their Terms of Use and Privacy Policy. You can opt out via Google's advertising opt-out page at www.google.com/privacy_ads.html or their Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.
  • Advertising Technologies that gather data about your online activities to provide more relevant advertising based on your interests.

You can manage tracking technology preferences through your browser settings. Most browsers allow you to refuse new cookies, manage acceptance of new cookies, or delete existing ones. However, disabling cookies may require manually adjusting preferences when visiting our site and may impact certain Service functionality.

To learn more about managing cookies, visit https://allaboutcookies.org and explore the «preferences» or «options» section in your browser's menu.

Data Security and Retention

We implement appropriate physical, technical, organizational, and administrative security measures to protect your Personal Data based on its nature and our processing methods. We recommend you help protect your data by using strong passwords, limiting device and browser access, and signing out after using your account.

Despite our best efforts, please understand that no data transmission or storage method is 100% secure.

We retain your Personal Data for as long as you maintain an active account or as needed to provide our Services. We may keep certain data longer when necessary for legal compliance, dispute resolution, fee collection, or as otherwise permitted by applicable laws and regulations. Information may be retained in anonymized form that cannot identify you personally.

Children's Personal Data

As stated in our Terms of Use, we do not knowingly collect or solicit Personal Data from children under 13 years old. If you are under 13, please do not attempt to register for or use our Services or provide any Personal Data. If we discover we've collected data from a child under 13, we will delete it promptly. If you believe a child under 13 may have provided us Personal Data, please contact us at [email protected].

California Resident Rights

California residents have specific rights under the California Consumer Privacy Act of 2018 («CCPA») and the California Privacy Rights Act of 2020 (CPRA), including rights to know, delete, and opt out, with businesses required to provide notices and means to exercise these rights.

For instructions on exercising these rights, see the «Exercising Your Rights» section below. If we process your Personal Data as a service provider to our customers, please contact the organization that collected your data directly to address your rights.

If any conflict exists between this section and other provisions of this Privacy Policy and you're a California resident, the portion offering stronger Personal Data protection will apply. For questions about this section or whether these rights apply to you, contact us at [email protected].

Access

You can request information about our collection and use of your Personal Data over the past 12 months. We'll provide:

  • Categories of Personal Data we've collected about you
  • Sources of that data
  • Our business or commercial purpose for collecting or selling your data
  • Third parties with whom we've shared your data
  • Specific pieces of Personal Data we've collected about you

For business-purpose disclosures of your Personal Data in the last 12 months, we'll identify the categories shared with each third-party recipient category. If we've sold your Personal Data, we'll identify categories sold to each third-party recipient category.

To exercise rights not addressed through disclosures in this policy, contact us at [email protected]. California residents may designate an authorized agent for request submission.

Correction

Subject to certain exceptions, you may correct inaccurate Personal Information we maintain. To exercise this right, contact us at [email protected].

Deletion

You may request deletion of Personal Data we've collected about you. Under the CCPA, certain exceptions apply: for example, we may need to retain data to provide Services, complete transactions, or fulfill other requested actions. If your deletion request falls under an exception, we may deny it.

You may also opt out of the sale or sharing of your personal information, including for cross-context behavioral advertising purposes.

Submit deletion requests by email to: [email protected].

Please note that Nova may maintain a record of your deletion request.

Exercising Your Rights

To exercise the rights described above, you or your Authorized Agent must submit a request that (1) provides sufficient verification information (such as personal ID, email address, payment card details, account URLs, etc.), and (2) describes your request clearly enough for us to understand and respond appropriately. Requests meeting these criteria are considered «Valid Requests.» We may not respond to requests failing to meet these criteria and will only use Personal Data provided in Valid Requests for verification and request fulfillment. No account is required to submit a Valid Request.

We aim to respond to Valid Requests within 45 days. We won't charge fees unless requests are excessive, repetitive, or clearly unfounded. If we determine a fee is warranted, we'll explain why before completing your request.

Submit Valid Requests by email to: [email protected].

You may authorize an agent («Authorized Agent») to exercise rights on your behalf by providing written permission, which we may request from your Agent when they submit requests for you.

Personal Data Sales Opt-Out and Opt-In

We do not sell your Personal Data and have not done so in the past 12 months.

Non-Discrimination for CCPA Rights Exercise

We will not discriminate against you for exercising CCPA rights. We won't deny goods or services, charge different prices or rates, or provide lower quality goods or services when you exercise these rights. However, we may offer different service tiers as permitted by data privacy laws with varying prices or service quality levels related to the value of Personal Data we receive.

Nevada Resident Rights

Nevada law (NRS 603A.340) requires businesses to establish designated request addresses where Nevada consumers can direct businesses not to sell certain personal information. Under Nevada law, a «sale» is the exchange of personal information for monetary consideration to a third party for licensing or selling the information to others. We don't currently sell personal data as defined by Nevada law. Nevada consumers wishing to submit requests regarding Nevada law compliance can contact us at [email protected] with the subject line «Nevada Do Not Sell Request» including your name and account email address.

Virginia Resident Rights

Virginia residents have specific privacy rights under the Virginia Consumer Data Protection Act («VCDPA»).

Subject to certain limitations, the VCDPA provides these rights:

  • Confirmation of whether we're processing your personal information and access to that information
  • Receiving your personal information in a portable and readily usable format
  • Correcting inaccuracies in your personal information
  • Deleting your personal information
  • Opting out of personal information processing for targeted advertising, third-party sales, or profiling that produces legal or similarly significant effects

Exercise these rights by contacting [email protected] and updating your cookie preferences.

Changes to this Privacy Policy

As we continuously improve our Services, we may update this Privacy Policy periodically. We'll notify you of significant changes through our website, email, or other appropriate means. If you've opted out of legal notice emails (or haven't provided an email address), these notices still govern your Service use, and you remain responsible for reviewing and understanding them. Using our Services after Privacy Policy changes indicates your acceptance of those changes. Information we collect is subject to the Privacy Policy in effect when collected.

Contact Information

For questions or comments about this Privacy Policy, how we collect and use your Personal Data, or your rights regarding collection and use, please contact us at: