Updated 2026-07-24
Privacy Policy
This policy explains what data Nova collects, why, how long we keep it, and the controls you have over it.
1. Who controls your data
Nova is operated by PT Efolusi Dunia Teknologi ("Efolusi"), registered in Indonesia under NIB 1510240001479, at Bumi Cikande Indah, Blok D12 No 15, Cikande, Kab. Serang, Banten 42186, Indonesia. For data you bring into your workspace, you are the controller and Efolusi is the processor acting on your instructions.
2. What we collect
Account data: your name, email, and organization details. Workspace content: the messages, files, tasks, and outputs you and the agent create. Connected-app data: data the agent reads or writes when you connect an integration, scoped to what the task needs. Operational data: logs, request metadata, and error reports used to run and secure the service.
3. How we use it
We use your data to provide the service (run your tasks, deliver results), to secure and debug the platform, to bill you, and to communicate about your account. We do not sell your data, and we do not use your prompts, files, or outputs to train models.
4. Sub-processors
We rely on a small set of processors to run Nova: infrastructure and object storage hosting, the LLM provider that powers the agent, Paddle (Merchant of Record) and other payment processors for billing, and error-monitoring. Each receives only the data needed for its function.
5. How we protect it
Data is encrypted in transit (TLS). Connected-app credentials are held in a per-org vault encrypted at rest, and secrets are redacted from stored run traces. Tenant isolation keeps each organization's data separated; access is least-privilege and audit-logged for privileged actions.
6. Retention, export, and deletion
We keep your workspace data for as long as your organization is active. You can export your data and delete individual items at any time. Deleting your organization cascades to remove its database records and stored files. Some minimal billing and audit records may be retained where law requires.
7. Your rights and contact
You may request access to, correction of, or deletion of your personal data. To exercise a right or ask a privacy question, email hi@efolusi.com from your account email.