Privacy Policy

Last updated: August 25, 2026

Nova Enterprises operates NovaNexus and related services (the "Platform"). This policy explains what information we collect, how we use it, and your rights regarding that information. By using the Platform, you agree to this policy.

1. Information We Collect

• •Account information: email address, hashed password (never stored in plaintext), and organization name when you register.
• •Service inquiry information: your name, email address, business name, current workflow description, service receipt, and inquiry status when you request the Workflow Setup Pilot.
• •Usage data: features you use, cards you generate, outcomes you log, and actions you take. This powers the calibration and learning systems.
• •Connection data: if a private account connects an external provider, we store only the credentials and account data needed for that enabled connection. Public live-broker execution is not currently offered.
• •Payment data: processed by Stripe. We do not store card numbers. We receive identifiers and status needed to correlate a payment or refund with an account or service receipt.
• •Communication data: if you contact us by email, we retain that correspondence.
• •Nexus chat data: full messages, Nova replies, and conversation-derived titles are stored with your account. Content-redacted interaction receipts are stored separately and exclude raw chat, but the associated conversation is not content-free.
• •Device and access data: IP addresses, browser type, and timestamps for security and fraud prevention.

2. How We Use Your Information

• •To provide, operate, and improve the Platform.
• •To generate personalized Decision Cards and calibrate recommendations from your logged outcomes.
• •To review service inquiries and request that our email provider send operator notices, confirmations, and other transactional messages. Provider acceptance does not guarantee inbox delivery.
• •To detect and prevent fraud, abuse, and unauthorized access.
• •To comply with applicable laws and respond to legal requests.
• •We do not sell your personal information to third parties.
• •We do not use your data to train AI models sold to other companies.

3. Data Retention

• •Your account data is retained as long as your account is active.
• •Nexus chat retention follows the same account retention and deletion rules. A content-redacted receipt may remain only where a separate legal, security, or integrity obligation requires it.
• •If you delete your account, personal information is removed within 30 days. Aggregated, anonymized data may be retained.
• •Outcome and decision data is stored to calibrate your personal recommendations. You may request deletion at any time.

4. Third-Party Services

• •Stripe: payment processing. Stripe's privacy policy governs data handled during payment.
• •Resend: email delivery infrastructure.
• •Railway and Vercel: cloud hosting and infrastructure.
• •Selected market-data or broker providers: used only where an explicitly labeled private, paper, sandbox, or future authorized connection is enabled.
• •AI processing: an AI-enabled Nexus turn may send your current message, up to ten recent stored messages, and relevant tool summaries to one or more configured providers.
• •Configured providers may include Google Gemini, Groq, xAI, OpenAI, and Anthropic; local inference may also be configured. The provider used can vary by availability.
• •Provider retention depends on Nova's configuration and that provider's terms. We do not promise zero retention by external AI providers. Do not submit secrets or third-party personal information you are not authorized to share.

5. Cookies and Local Storage

• •We use browser local storage to maintain your login session and store some tool data locally (e.g., income tracker sessions).
• •We use minimal cookies for authentication only. We do not use advertising cookies or third-party tracking.
• •We use Vercel Web Analytics to measure anonymized, aggregate page views, including page or route, referrer, approximate location, browser, operating system, and device type. It does not use cookies or track visitors across websites. We do not use it for advertising and do not send form or lead contents or custom events. Read Vercel’s Web Analytics privacy and compliance details.

6. Security

• •All data is transmitted over HTTPS.
• •Passwords are hashed using bcrypt and never stored in plaintext.
• •Private product routes use account and authority checks. No system can guarantee absolute security.
• •If you discover a security vulnerability, contact hello@novanexus-ai.com.

7. Your Rights

• •Access: request a copy of your personal data at any time.
• •Correction: update account information through the Settings page.
• •Deletion: request deletion of your account and associated data.
• •Portability: request a copy of associated personal information. Some individual tools also provide direct exports.
• •To exercise any of these rights, email hello@novanexus-ai.com.

8. Children's Privacy

• •The Platform is not intended for individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has registered, contact us immediately.

9. International Users

• •The Platform is operated from the United States. If you access it from outside the US, your data may be transferred to and processed in the United States.
• •We apply GDPR principles of data minimization, purpose limitation, and user rights to all users regardless of location.

10. Changes to This Policy

• •We may update this Privacy Policy. We will notify registered users of material changes by email. Continued use after changes constitutes acceptance of the updated policy.