Privacy
Privacy Policy
NOVA handles sensitive identity inputs. This policy exists because placeholder legal links are unacceptable for a security product.
What NOVA processes
NOVA may process email addresses, phone numbers, usernames, names, and uploaded images when you run checks.
Provider-backed scans rely on third-party services such as Have I Been Pwned, Twilio, Google Vision, and Stripe when relevant to the feature you use.
How scan data is handled
The current product flow is designed around in-memory request handling. Scan history shown in the UI is stored locally in your browser, not in a user account database.
NOVA does not claim perfect non-retention across third-party providers. Users should assume submitted inputs are processed by the selected provider for the purpose of returning results.
Billing and legal contact
Billing is handled through Stripe-hosted checkout. Contact: hello@nova.app.
This policy should be reviewed by counsel before production launch. It is now a real route, not a dead footer link.