Privacy Policy

Effective date: February 2, 2026

Nova Desk Inc. ("Nova Desk," "we," "our") makes Nova, an AI assistant for macOS. This Privacy Policy describes the personal information we handle in connection with the Nova website and application, the reasons we handle it, and the rights you have. We keep our data practices as simple as the product itself, and we never sell your personal information.

Data We Process

We process only the data that is needed to run the product and serve you:

• Identity and contact data. Your name and email address, provided when you purchase a license, register an account, or get in touch with our team.
• License records. Your license key, activation timestamps, and device identifiers used to validate that your copy of Nova is legitimate.
• Technical data. macOS version, app version, and — only if you opt in — aggregated telemetry about feature usage and crash reports that help us diagnose problems.
• Communication data. The contents of emails and messages you send to our support team, plus any files you attach to them.
• Financial data. Payment information such as card details and billing address, which is collected and stored by our payment processor; we receive only the outcome of the transaction and the last four digits of the card.

Why We Process It

We process the data above for these reasons:

• To sell, activate, and renew your license to use Nova;
• To process payments, issue invoices, and administer refunds;
• To answer support questions and resolve technical issues;
• To improve the reliability, security, and performance of the app;
• To prevent fraud, piracy, and abuse of our licensing system;
• To meet legal, accounting, and tax obligations;
• To send you important product or security notices (we do not send marketing mail unless you ask for it).

We rely on contract performance for the core services you purchase, on legitimate interest for security and product improvement, on your consent for optional telemetry, and on legal obligations where applicable. Where we rely on consent, you can withdraw it at any time.

Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) give you specific rights regarding your personal information:

• Right to know. You may ask what categories of personal information we have collected about you, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to delete. You may ask us to delete personal information we hold about you, subject to exceptions such as completing a transaction, detecting security incidents, or complying with legal obligations.
• Right to correct. You may ask us to correct inaccurate personal information we maintain about you.
• Right to opt out of sale and sharing. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of. If that ever changes, this policy will be updated and an opt-out mechanism will be provided.
• Right to non-discrimination. We will not deny you goods or services, charge different prices, or provide a different level of service because you exercised your privacy rights.
• Right to designate an authorized agent. You may designate an authorized agent to make a request on your behalf, subject to identity verification.

To exercise any of these rights, email support@nova-desk.top or use the form on our contact page. We will verify your identity and respond within 45 days. We also honor the California "Shine the Light" law: you may request, once per calendar year, information about disclosures of personal information to third parties for their direct marketing purposes; we do not make such disclosures.

How We Share Data

We share personal information only with a limited set of service providers who act on our behalf and under our instructions: the payment processor that handles transactions, the hosting provider that runs our servers, the email service that delivers our messages, and the crash-reporting tool that receives opt-in diagnostics. These providers are bound by data processing agreements and may not use your data for their own purposes. We may also disclose data when required by law, court order, or government request, or when necessary to protect our rights, users, or the public. In the event of a merger, acquisition, or sale of assets, personal information may be transferred to the new entity, and we will notify you as required by law.

Retention & Deletion

We keep personal information only as long as needed for the purposes described in this policy. License and purchase records are kept for the life of your license plus the periods required by tax law. Support correspondence is retained for two years after the last message. Opt-in telemetry is de-identified or deleted within 18 months of collection. When retention is no longer justified, we delete or anonymize the data. You can request deletion of your personal information at any time; we will honor the request unless we are legally required to keep it, in which case we will tell you why.

Security Practices

We protect personal information with safeguards appropriate to its sensitivity: encryption in transit using TLS, hashed storage of credentials, least-privilege access controls that limit who can view data internally, routine security reviews, and an incident response process that includes notifying affected individuals and regulators when the law requires. We also apply secure development practices to the Nova codebase, including regular dependency updates. No security measure is perfect, but we work hard to keep your data safe and are transparent when something goes wrong.

Questions & Requests

For any question about this policy, about your data, or to make a privacy request, contact our privacy team:

Nova Desk Inc.
548 Market Street, Suite 45000
San Francisco, CA 94104, USA
Email: support@nova-desk.top

We will acknowledge your request within 10 business days and resolve it within the timeframe required by law. This policy may be revised from time to time; the effective date above shows when it was last updated.