Last updated 22 July 2026
Privacy
Scope of this page. The sections on connected Google accounts, what Nova stores, and how to disconnect are complete and current — they describe the product as built. The broader legal apparatus (lawful basis, statutory rights procedures, governing law, sub-processor register) is being finalised with external counsel and will be expanded here before Nova accepts its first paying customer.
Who we are
Nova is a product of PrimeX Meta, Dubai, UAE. Questions about your data go to support@primexmeta.com.
Connected Google accounts
Nova can connect to your Google Calendar so that it can show you your schedule and answer questions about it. Connecting is optional, you choose it explicitly, and Nova works without it.
What we request, and what we do not
Nova requests read-only access to your calendar (calendar.readonly). It cannot create, change, move or delete an event, and it cannot invite anyone. Nova does not request access to your Gmail, your Drive files, your contacts, or your location.
What we do with it
- Show your events inside Nova, alongside the reminders and to-dos you keep there.
- Answer questions you ask about your own schedule — “what does Thursday look like”, “when am I free next week”.
That is the entire list. Calendar data is not used for advertising, not used to build a profile of you, and not used for any purpose you did not ask for.
How the connection is stored
The access and refresh tokens Google issues are encrypted at rest in a dedicated secrets vault. The record of your connection stores only a reference to them, never the tokens themselves, so the ordinary application database does not contain a credential that could be used against your Google account. Only the metering service that makes the calendar request can decrypt them; the web application has no ability to read them at all.
Disconnecting, and what happens then
You can disconnect at any time from Connections inside Nova. Disconnecting destroys the stored tokens immediately and removes calendar data Nova derived from them. You can also revoke Nova's access directly from your Google account at myaccount.google.com/permissions, which has the same effect.
Limited Use
Nova's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, and stated plainly because it is the commitment that matters most: data obtained from Google APIs is never used to develop, improve or train generalised artificial intelligence or machine learning models, whether by us or by any service we use. It is not sold, and it is not transferred to anyone except as needed to provide the feature you asked for, or where the law requires it.
What else Nova holds
Separately from any connected account: your email address and display name, the to-dos and reminders you create, the conversations you have with the assistant, the notes you ask it to remember, bookings made through your public booking link if you enable one, and a record of what you have spent so your balance can be shown to you.
Where it is held
Nova's database is hosted in Mumbai, India (ap-south-1). Requests to language models are made to Nous Research, our model provider. We do not use your content to train models and do not permit our model provider to do so.
Who can see your content
Our staff cannot read your content through the operator console. It can show that an account exists, what it has spent, how many notes or to-dos it holds and whether a connection is healthy — it cannot show what any of them say. That is enforced by the database views the console is built on, which do not expose those columns at all, rather than by policy alone.
This is a statement about the product, not a claim that data is mathematically unreachable: engineers with direct database access can, as at any company, reach the underlying tables. Access is restricted to those who need it to operate the service.
What we do not do
- We do not train models on your content. Your conversations, notes and calendar are not training data.
- We do not sell or share your data with advertisers or data brokers.
- We do not read your mail. Nova does not request Gmail access.
Your records
You can export what Nova holds about you and you can delete your account. One honest caveat: the credit ledger is deliberately append-only, so a correction adds a reversing entry rather than erasing history. How that interacts with a deletion request is one of the points being settled with counsel, and this page will say plainly what happens once it is.
Changes
When this policy changes materially we will say so here and date it. The date at the top of this page is when it was last changed.
Contact
support@primexmeta.com · PrimeX Meta, Dubai, UAE