Privacy Policy

Last updated: March 29, 2026

Nova ("we", "us", "our") is an AI assistant service accessible through Telegram. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

When you use Nova through Telegram, we may collect:

Telegram Account Info: Your Telegram user ID, username, first name, and language preference. We do not have access to your phone number.
Messages: Messages you send to the bot are processed to generate AI responses. Message history is stored to provide conversation context.
Files: Files you send to the bot (images, documents, etc.) are temporarily stored for processing and automatically deleted after 7 days.
Usage Data: Token consumption, model selection, and feature usage for billing and service improvement.

2. Optional Features & Additional Data

Some features collect additional data only when you choose to use them:

Google Integration: If you bind your Google account, we store an encrypted OAuth token to access Gmail and Google Calendar on your behalf. We do not store your Google password.
GitHub Integration: If you bind GitHub, we store an encrypted personal access token.
TOTP Authenticator: TOTP secrets are encrypted with AES-256-GCM before storage.
Password Generator: We store a master key to generate deterministic passwords. The actual passwords are never stored.
Encrypted Vault: Files in the vault are encrypted with your personal key (AES-256-GCM) before upload. We cannot read your vault files.
TRON Wallet: If you create a wallet, the private key is encrypted with AES-256-GCM before storage.
AI Memory: The AI may automatically extract and remember key information from conversations to provide better assistance. You can view and delete memories at any time.

3. How We Use Your Data

To provide and improve the AI assistant service
To process your messages and generate AI responses
To manage your account and billing
To execute features you request (reminders, file management, etc.)
To prevent abuse and ensure service security

4. Data Storage & Security

Data is stored in MongoDB Atlas (cloud database) with encryption at rest.
Files are stored in Cloudflare R2 with CDN delivery.
Sensitive data (tokens, secrets, private keys) is encrypted with AES-256-GCM before storage.
We use HTTPS for all data transmission.
Temporary files (VFS) are automatically deleted after 7 days.

5. Third-Party Services

Nova integrates with the following third-party services to provide its features:

AI Providers: OpenAI, Google (Gemini), Anthropic (Claude), xAI (Grok), DeepSeek — for AI responses
Telegram — as the messaging platform
Cloudflare — for file storage (R2) and web hosting (Pages)
Google APIs — for Gmail and Calendar integration (only if you bind)
GitHub API — for repository management (only if you bind)
TronGrid — for TRON blockchain interactions (only if you use the wallet)
Replicate — for AI image/music/video generation

Each third-party service has its own privacy policy. We encourage you to review them.

6. Data Retention

Messages: Retained until you clear conversation history or delete your account.
Temporary files: Automatically deleted after 7 days.
Vault files: Retained until you delete them.
AI Memories: Low-importance memories are automatically cleaned after 90 days of inactivity. You can manually delete any memory.
Account data: Retained until account deletion.

7. Your Rights

You have the right to:

Access: View your data through the bot and WebApp.
Delete: Delete your messages, memories, files, and vault contents at any time.
Unbind: Disconnect third-party services (Google, GitHub) at any time via /bind unbind.
Account Recovery: Set up a recovery key to protect your account.
Export: Request a copy of your data by contacting us.

8. Children's Privacy

Nova is not intended for users under the age of 13. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

10. Contact

If you have questions about this privacy policy, please contact us:

Telegram: @NovamicoBot
Support Group: @openaismart