Privacy Policy

1. What we collect

Depending on how you use Nova, we collect:

• Account data — email address, hashed password, and workspace name.
• Business data you upload — bank statement PDFs, invoices, client details, and inventory records you add to your workspace.
• Usage data — login activity, OCR/statement-processing usage (to enforce plan limits), and basic error logs.
• Billing data — handled directly by Paystack; Nova does not receive or store your card number.
• Messages you send us — if you email us directly.

2. How we use it

We use this information to:

• Provide and operate your Nova workspace (invoicing, OCR statement capture, reporting);
• Process subscription payments and enforce plan limits;
• Send account-related emails (verification, password reset, billing notices);
• Respond to support requests you email us;
• Maintain the security and reliability of the service.

We do not sell your data or use it for third-party advertising.

3. Security measures

Passwords are stored hashed, never in plain text. Access to workspace data is scoped by account and role (viewer, editor, admin). Data is stored on our hosting provider's infrastructure with access restricted to what's needed to operate Nova.

4. Third parties we share data with

• Paystack — processes subscription payments on our behalf.
• Our email provider — delivers account and billing emails.
• Our hosting provider — stores your workspace data and runs the application.
• Google Maps — embeds a map of our location on the Contact page; Google's own privacy policy applies to that embed.
• Google Gemini (AI provider) — if you use the optional "Ask your business" assistant (Professional plan), the question you ask and the relevant workspace data needed to answer it are sent to Google's Gemini API for processing. We use Gemini's paid API tier specifically so this data is not used to train Google's models.
• Sellers you buy from — if you place an order through a workspace's shop, we share the name, email address, phone number and delivery address you provide with that Seller, because they need it to fulfil and deliver your order. The Seller is an independent responsible party for that information under POPIA and handles it under their own privacy practices, not ours.

We don't share your data with anyone else except where required by law.

5. If you buy from a shop on Nova

You can place an order without creating a Nova account. When you check out as a guest we collect your name, email address, phone number and delivery address or collection preference, together with the items and amounts of your order.

We use this to create and record the order, send you a confirmation and receipt, give you a private link to track it, and pass the details to the Seller so they can fulfil it. Your card details are entered on Paystack's payment page and are never seen or stored by Nova.

Your guest tracking link contains a random, unguessable token. Treat it as private: anyone with that link can view that order.

If you order while signed in to a Nova account, the order is also kept in your account's order history so you can find it again later.

6. Your rights

Under South Africa's Protection of Personal Information Act (POPIA), you have the right to access, correct, or request deletion of your personal information, and to object to how it's processed. To exercise any of these rights, email admin@prolatemeteors.com.

7. Data retention

We keep your account and workspace data for as long as your account is active. If you delete a workspace, its records and uploaded documents are removed. If you close your account entirely, contact us and we'll delete your remaining data except where we're required to retain it (for example, billing records for tax purposes). Marketplace order records are kept as business records of a completed transaction, and a Seller keeps their own copy of orders placed with them, which we cannot delete on their behalf.

8. Contact

Questions about this policy or your data? Email admin@prolatemeteors.com or use our Contact page.