Privacy Policy

1. Introduction

Nova is the AI website-and-app builder operated by VXERA AI (“VXERA”, “Nova”, “we”, “us”, or “our”), headquartered in Ontario, Canada. We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian federal and provincial privacy legislation.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use Nova to plan, build, and deploy websites and applications.

2. Information We Collect

We collect only what we need to run Nova for you:

• Account Information: Your name, email address, and — for paid plans — billing details, collected when you sign up (including via GitHub or Google sign-in).
• Payment Information: Processed securely by our payment provider (Stripe). We never store full card numbers on our servers.
• Prompts & Build Data: The prompts you send to Nova and the code, content, and projects it generates for you, so we can build, review, deploy, and let you return to your work.
• Connected Services: When you connect services like Supabase, Stripe, Clerk, Shopify, GitHub, or Vercel, we store the tokens needed to wire them into your project. We never display or log secret values back to anyone.
• Usage Data: How you interact with Nova — features used, IP address, browser and device information — to keep the product reliable and secure.
• Communications: Information you provide when you contact support or fill out a form.

3. How We Use Your Information

• To plan, build, review, and deploy the websites and applications you create with Nova.
• To operate and maintain your account, projects, and billing.
• To improve the reliability, quality, and performance of Nova.
• To provide support, onboarding, and product updates.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our Terms of Service.

4. How We Handle Your Prompts & Code

Your prompts, projects, and generated output are yours. We use them only to run and improve the Service for you. We do not sell your data, and we do not train public AI models on your private prompts or code. Nova may use trusted AI model providers to generate output; those providers process your content solely to return results to you and do not use it to train their models on your behalf.

Connected repositories & accounts. When you connect GitHub or another code host, you choose which repositories Nova may access, and Nova accesses only the repositories you authorize — nothing else. We store a connection identifier so Nova can act on those repositories at your direction; we do not copy or retain your repositories beyond what is needed to perform the actions you request, and you can revoke access at any time through the provider.

5. Consent

In accordance with PIPEDA, we obtain your consent before collecting, using, or disclosing your personal information, except where permitted or required by law. By creating an account or using Nova, you consent to the collection and use of your information as described in this policy. You may withdraw your consent at any time, subject to legal or contractual restrictions.

6. Disclosure of Information

We do not sell your personal information. We may share it with:

• Service Providers: Infrastructure, hosting, payment, and AI model providers that help us run Nova. They are contractually bound to protect your data.
• Services You Connect: The integrations you explicitly link to a project (e.g. Supabase, Stripe, GitHub, Vercel), used only as you direct.
• Legal Requirements: When required to comply with applicable law, regulation, or a valid legal request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

7. Data Storage and Security

Your data is stored on secure servers. We use industry-standard technical and organizational safeguards — including encryption in transit and at rest, access controls, and secure development practices — to protect it against unauthorized access, alteration, disclosure, or destruction. No method of electronic storage is 100% secure, so we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only as long as necessary to provide the Service or as required by law. You can delete projects or request deletion of your account and associated data at any time.

9. Your Rights

Under PIPEDA and applicable Canadian privacy law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Withdraw your consent to the collection, use, or disclosure of your information.
• Request deletion of your personal information, subject to legal retention requirements.
• File a complaint with the Office of the Privacy Commissioner of Canada.

10. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, understand usage, and improve Nova. You can manage cookies through your browser settings; essential cookies required for the product to work cannot be disabled.

11. International Users

Nova is available globally and supports multiple languages and regions. Wherever you use it from, your information is handled under this policy and applicable Canadian privacy law, along with any additional protections required by your local jurisdiction.

12. Children’s Privacy

Nova is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we learn we have, we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy here and revise the “Last updated” date. Continued use of Nova after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

VXERA AI — Nova

Ontario, Canada

Email: privacy@vxera.ai