Privacy Policy
Privacy Policy
Last Updated: September 27, 2026
Notova (“Notova,” “we,” “us,” or “our”) operates the Notova website, applications, and related services available at https://notova.ai (collectively, the “Service”).
Notova is an AI-powered study platform that helps users create and organize study materials, including notes, flashcards, quizzes, summaries, and study plans.
This Privacy Policy explains how we collect, use, store, disclose, retain, and protect information about you when you access or use the Service. It also explains how we handle information received through Google Sign-In and Google Calendar.
By accessing or using Notova, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
A. Information You Provide Directly
We may collect information that you provide when you create an account, use the Service, contact us, or otherwise communicate with us, including:
Account information, such as your name, email address, login credentials, and account preferences.
Study materials and user content, such as documents, notes, text, prompts, course information, flashcards, quizzes, study plans, and other educational content that you upload, create, submit, or generate through the Service.
AI interaction information, such as prompts, questions, instructions, and other content you submit when using Notova’s AI-powered features, as well as content generated in response.
Workspace and planning information, such as tasks, deadlines, study sessions, and study plans that you create within Notova.
Communications, such as feedback, support requests, survey responses, and messages you send to us.
Payment and subscription information, if you purchase a paid subscription. Payments may be processed by a third-party payment processor. Notova does not intentionally collect or store complete payment card numbers.
B. Information Collected Automatically
When you use the Service, we may automatically collect:
Usage information, such as pages viewed, features used, actions taken, session duration, and interactions with the Service.
Device and technical information, such as browser type, device type, operating system, IP address, approximate location inferred from IP address, language settings, error logs, and diagnostic information.
Cookies and similar technologies, used to keep you signed in, remember preferences, help protect the Service, and understand how users interact with Notova.
C. Information From Google Sign-In
Notova allows you to create an account or sign in through Google Sign-In.
If you choose Google Sign-In and authorize the requested permissions, Notova may receive the following information from your Google Account:
Your Google Account unique identifier.
Your name.
Your email address.
Your profile image or profile image URL.
Whether Google has verified your email address.
Notova uses this information to create, locate, authenticate, secure, and manage your Notova account; associate your Notova activity with the correct account; display your account name or profile image where applicable; and prevent unauthorized access or misuse.
Notova requests the permissions needed for Google Sign-In: openid, userinfo.email, and userinfo.profile.
D. Information From Google Calendar
If you choose to connect Google Calendar and authorize the requested permissions, Notova may access information from calendars you can access through your Google Account. This may include calendar names and identifiers, event titles, dates, times, descriptions, locations, and other event details available through the permissions you grant.
Notova requests the following read-only Google Calendar permissions:
calendar.readonly, which allows Notova to view calendars you can access.calendar.events.readonly, which allows Notova to view events on your calendars.
We use Google Calendar information to display your schedule in Notova and help you organize study tasks and sessions around your existing commitments. These permissions do not allow Notova to create, edit, or delete events in Google Calendar.
We may store the credentials needed to maintain your authorized connection and calendar information needed to provide the calendar feature. We do not sell Google Calendar data or use it for advertising.
You can revoke Notova’s Google Calendar access through your Google Account settings. Revoking access stops Notova from obtaining new calendar information through that authorization. Information already stored by Notova remains subject to the retention and deletion practices described in this Privacy Policy.
Notova does not request access to Gmail messages, Google Drive files, or Google Contacts. If we introduce a feature that requires additional Google data, we will explain the requested access and ask for your authorization before using it.
2. How We Use Information
We use information we collect to:
Create, authenticate, maintain, and secure your Notova account.
Provide, operate, maintain, troubleshoot, and improve the Service.
Process the content you submit to deliver user-requested study features, including generating notes, flashcards, quizzes, summaries, and study plans.
Store and display your study materials, generated content, preferences, and workspace information within your account.
Connect to Google Calendar when you authorize it, display calendar information in Notova, and help you plan study tasks and sessions around your schedule.
Maintain and secure your authorized Google connection and synchronize calendar information needed to provide the calendar feature.
Process subscriptions, manage billing, and provide customer support.
Communicate with you about your account, security, product updates, service notices, support matters, and other transactional communications.
Monitor for, investigate, and prevent fraud, misuse, abuse, security incidents, and violations of our terms or applicable law.
Comply with legal obligations and protect the rights, safety, and security of Notova, our users, and others.
3. How We Share Information
We may disclose information:
To service providers that help us operate the Service, such as hosting, storage, analytics, AI processing, customer support, and payment providers. They may process information on our behalf to provide those services.
At your direction, when you choose to share content or connect a third-party service.
For legal and safety reasons, when we believe disclosure is necessary to comply with applicable law, respond to a lawful request, enforce our terms, or protect rights, safety, or security.
In a business transaction, such as a merger, acquisition, financing, or sale of assets, subject to applicable law.
We do not sell your personal information or Google user data. We do not share Google Calendar information with third parties for advertising.
4. AI Features and User Content
To provide AI-powered features, Notova may send the prompts, study materials, and other content needed to fulfill your request to service providers that process information on our behalf. Generated materials may be inaccurate, so you should review them before relying on them.
Please avoid submitting sensitive personal information that is unnecessary for your use of the Service.
5. Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, protect the Service, and understand how it is used. You may be able to manage cookies through your browser settings. Disabling certain cookies may affect the Service’s functionality.
6. Data Retention and Deletion
We retain information for as long as needed to provide the Service, maintain your account, meet legal obligations, resolve disputes, and protect the Service. Retention periods may vary by the type of information and the reason we collected it.
If you delete your account or ask us to delete your information, we will delete or deidentify information associated with your account, subject to information we need to retain for legal, security, billing, or other legitimate purposes. Copies may remain in backups for a limited period before they are deleted through our normal backup process.
Revoking Google access prevents future access through that authorization, but it does not by itself delete information already stored in your Notova account. You may request deletion of that information as described in Section 9.
7. Security
We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Children’s Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact us so we can address it.
9. Your Choices and Rights
You may be able to review or update certain account information within Notova. You may also request access to, correction of, or deletion of your personal information by contacting us using the details below. We will respond in accordance with applicable law.
You can revoke Notova’s access to your Google Account through your Google Account settings. You may also manage cookies through your browser settings and opt out of nonessential promotional emails using the unsubscribe instructions in those messages.
10. Third-Party Services
The Service may contain links to or integrations with third-party services. Their privacy practices are governed by their own policies. This Privacy Policy applies to Notova’s handling of information, including information we receive through an authorized Google connection.
11. Changes to This Privacy Policy
We may update this Privacy Policy as the Service or our practices change. We will post the updated policy with a revised “Last Updated” date. If changes are material, we may provide additional notice as required by applicable law.
12. Contact Us
If you have questions about this Privacy Policy or would like to make a privacy request, contact us at:
Notova
Email: support@notova.ai
Website: https://notova.ai