Privacy Policy

1. What we collect

Depending on how you use Nova, we collect:

• Account data — email address, hashed password, and workspace name.
• Business data you upload — bank statement PDFs, invoices, client details, and inventory records you add to your workspace.
• Usage data — login activity, OCR/statement-processing usage (to enforce plan limits), and basic error logs.
• Billing data — handled directly by Paystack; Nova does not receive or store your card number.
• Messages you send us — if you email us directly.

2. How we use it

We use this information to:

• Provide and operate your Nova workspace (invoicing, OCR statement capture, reporting);
• Process subscription payments and enforce plan limits;
• Send account-related emails (verification, password reset, billing notices);
• Respond to support requests you email us;
• Maintain the security and reliability of the service.

We do not sell your data or use it for third-party advertising.

3. Security measures

Passwords are stored hashed, never in plain text. Access to workspace data is scoped by account and role (viewer, editor, admin). Data is stored on our hosting provider's infrastructure with access restricted to what's needed to operate Nova.

4. Third parties we share data with

• Paystack — processes subscription payments on our behalf.
• Our email provider — delivers account and billing emails.
• Our hosting provider — stores your workspace data and runs the application.
• Google Maps — embeds a map of our location on the Contact page; Google's own privacy policy applies to that embed.
• Google Gemini (AI provider) — if you use the optional "Ask your business" assistant (Professional plan), the question you ask and the relevant workspace data needed to answer it are sent to Google's Gemini API for processing. We use Gemini's paid API tier specifically so this data is not used to train Google's models.

We don't share your data with anyone else except where required by law.

5. Your rights

Under South Africa's Protection of Personal Information Act (POPIA), you have the right to access, correct, or request deletion of your personal information, and to object to how it's processed. To exercise any of these rights, email admin@prolatemeteors.com.

6. Data retention

We keep your account and workspace data for as long as your account is active. If you delete a workspace, its records and uploaded documents are removed. If you close your account entirely, contact us and we'll delete your remaining data except where we're required to retain it (for example, billing records for tax purposes).

7. Contact

Questions about this policy or your data? Email admin@prolatemeteors.com or use our Contact page.