Privacy Policy
This policy describes how Nova Steward handles information when you use the website, application, connected accounts, and provider-backed features.
1. Information we collect
We may collect account details, authentication and security records, requests and approvals, preferences and memories you save, device and service logs, approximate or precise location when permitted, and information obtained from services you choose to connect.
2. Google user data
When you connect Google, Nova accesses only the scopes you authorize for supported Gmail and Calendar functions. Google data is used to provide the features you request, protect the service, and maintain an audit trail. Nova does not sell Google user data or use it for advertising.
3. How information is used
We use information to authenticate users; understand and fulfill requests; compare providers; request and record approvals; execute authorized actions; maintain security and reliability; personalize the service; provide support; and comply with legal obligations.
4. When information is shared
Information may be shared with a provider when required to perform an action you request—for example, traveler details supplied to a booking provider. We may also use infrastructure and service vendors acting on our behalf, respond to lawful process, or share information when necessary to protect users and the service. We do not sell personal information.
5. Location data
Browser or device location is collected only after permission and is used for location-aware searches and coordination. You can deny or revoke location access through your browser or device settings.
6. Retention and deletion
We retain information for as long as needed to provide the service, maintain security and audit records, meet legal obligations, and resolve disputes. You may request deletion of eligible account information, subject to required security, transaction, and legal retention.
7. Security
Nova uses measures including encrypted transport, secure HTTP-only sessions, tenant separation, scoped provider access, action-bound approvals, audit records, and step-up authentication for sensitive actions. No system can guarantee absolute security.
8. Your choices
You may update account information, disconnect providers, revoke Google access through your Google Account, control location permission, and request access, correction, or deletion where applicable.
9. Children
Nova is not directed to children under 13 and is not intended for anyone who cannot legally authorize the transactions or connected-account access they request.
10. Changes and contact
Material updates will be posted with a revised effective date. Privacy questions or requests may be sent to privacy@novasteward.com.