Privacy Policy

Last Updated: May 18, 2026

Welcome to Notova ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered study platform at notova.ai (the "Service").

By using Notova, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Information You Provide Directly

  • Account Information: When you create an account, we collect your name and email address

  • Study Materials: Documents, notes, and other educational content you upload to generate flashcards, quizzes, and study materials

  • Calendar Information: Tasks, study plans, and events you create within our platform

Information Collected Automatically

  • Usage Data: Information about how you interact with our Service, including features used and time spent

  • AI Interaction Data: Records of your interactions with our AI features, including prompts and generated content

  • Cookies and Similar Technologies: We use cookies to maintain your login session and remember your preferences

Information from Third-Party Services

  • OAuth Authentication: If you sign in with Google, we receive your email address and basic profile information

How We Use Your Information

We use the collected information for the following purposes:

  • Provide and Maintain Our Service: To operate Notova and deliver the features you request

  • AI-Powered Features: To generate flashcards, quizzes, notes, and study materials from your uploaded content using Anthropic's Claude API

  • Study Plan Generation: To create AI-generated study sessions and plans within your Notova workspace

  • Account Management: To manage your account, authenticate your identity, and keep you logged in

  • Service Improvement: To understand how users interact with our Service and improve functionality

  • Communication: To send you service-related notifications and respond to your inquiries

AI Processing

We use Anthropic's Claude API to power our AI features. When you use AI features:

  • Your uploaded study materials and prompts are sent to Anthropic for processing

  • We do not train AI models on your personal data

  • Generated content (notes, flashcards, quizzes, study materials) is stored in your account

Data Storage and Security

  • Storage Location: Your data is stored securely using Railway (application hosting) and Supabase (database infrastructure)

  • Security Measures: We implement industry-standard security measures to protect your information from unauthorized access, alteration, or destruction

  • Data Retention: We retain your data for as long as your account is active or as needed to provide you services. You may delete your account at any time

  • No Sale of Data: We do not sell, trade, or rent your personal information to third parties

Third-Party Services

Anthropic

We use Anthropic's Claude API to generate educational content. Content you submit for AI processing is sent to Anthropic and subject to Anthropic's API data usage policies. Anthropic does not use API data to train their models.

Railway

Our Service is hosted on Railway's platform. Your application data is processed on Railway's servers and subject to their infrastructure security measures.

Supabase

We use Supabase as our database infrastructure. Your data is stored on Supabase's servers and subject to their security and privacy standards.

Your Rights and Choices

You have the following rights regarding your information:

  • Access: You can access your personal information through your account settings

  • Correction: You can update or correct your information at any time

  • Deletion: You can request deletion of your account and associated data by contacting us at support@notova.ai

  • Opt-Out of Cookies: You can configure your browser to refuse cookies, though this may limit functionality

  • Data Export: You can request a copy of your data by contacting us

Children's Privacy

Notova is available to users of all ages. If you are under 13, please obtain parental consent before using our Service. We do not knowingly collect information from children under 13 without parental consent. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information.

International Data Transfers

Your information may be transferred to and maintained on servers located in the United States. By using our Service, you consent to this transfer.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Your California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected

  • Right to know whether personal information is sold or disclosed

  • Right to opt-out of the sale of personal information (we do not sell data)

  • Right to request deletion of personal information

  • Right to non-discrimination for exercising your rights

To exercise these rights, contact us at support@notova.ai

European Users (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR):

  • Right to access your personal data

  • Right to rectification of inaccurate data

  • Right to erasure ("right to be forgotten")

  • Right to restrict processing

  • Right to data portability

  • Right to object to processing

  • Right to withdraw consent

To exercise these rights, contact us at support@notova.ai