Privacy Policy

Nova (“we”, “us”, “our”) is an AI chat product operated by Codecasa Studios. This policy explains what information we collect when you use chatwithnova.ai and the related apps, how we use it, who we share it with, and the choices you have. We wrote it to be readable — if anything is unclear, email hello@codecasastudios.com.

• Account info. When you sign up we store your email address and, optionally, a display name. If you sign in with Google, we receive your email, name, and profile picture from Google.
• Conversations. The chats you have with AI models — prompts you send and responses returned — are stored in your account so you can come back to them.
• Usage data. We record token usage (how many requests you’ve made each day), the model you selected, and basic timestamps to enforce rate limits and improve the service.
• Technical data. Like most web apps, our hosting provider logs IP addresses, user agents, and error traces for security and debugging. These logs are retained for a limited period.
• Optional API key. If you paste your own OpenRouter API key into Settings, it is stored in your browser’s local storage only — we never send it to our servers.

• To let you sign in and keep your chat history available across sessions.
• To route your prompts to the AI model you pick and return the response to your screen.
• To grant the 20-token signup bonus, track your remaining balance, and record paid top-ups against your account.
• To keep the service secure, debug issues, and prevent abuse.
• To contact you with account or service-related messages (rare).

We do not sell your data. We do not use your conversations to train our own models.

Nova depends on a small number of trusted providers. When you use Nova, the relevant data is shared with these services as described below.

• OpenRouter — We forward the prompts you send (and your chosen model) to OpenRouter, which routes them to the underlying model provider (OpenAI, Anthropic, Google, xAI, DeepSeek, Alibaba, etc.). OpenRouter and the model providers have their own privacy and data-retention policies, which control how they handle that content. See openrouter.ai/privacy.
• Supabase — We use Supabase for authentication and database storage. Your account, conversations, and token usage are stored on Supabase’s infrastructure.
• Google — Only if you choose “Sign in with Google”. Google shares basic profile info with us; we never receive your Google password.
• Vercel — Our hosting provider. Vercel handles request logs and network-level infrastructure for the site.

We use cookies and browser local storage for things the app genuinely needs: keeping you signed in, remembering your theme preference, and storing the optional OpenRouter API key you paste into Settings. We don’t use advertising or cross-site tracking cookies.

Account data and conversations are kept for as long as your account exists. You can delete individual conversations at any time from the sidebar. If you want your entire account and all associated data deleted, email us (see below) and we’ll take care of it within a reasonable timeframe.

Depending on where you live, you may have rights under laws like GDPR (EU/UK) or the CCPA (California) to:

• Access the personal data we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Export your conversations in a portable format.
• Object to certain processing, or withdraw consent where applicable.

To exercise any of these rights, email hello@codecasastudios.com.

We use industry-standard practices — HTTPS in transit, scoped database access policies, and secrets managed by our hosting provider. No system is perfectly secure, but we take it seriously. If you believe you’ve found a vulnerability, please email us responsibly.

Nova is not intended for children under 13 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we’ll remove it.

We’ll update this page if our practices change. Material changes will be flagged in the app or by email when we have one. The “Effective” date at the top always reflects the current version.

Questions, requests, or complaints? Email hello@codecasastudios.com.