AI Chatbot - Nova

"identifier for advertisers designated in your mobile device used in accessing our services (The Identifier for Advertisers-IDFA), identifier for vendors/developers designated your mobile device (The Identifier for Vendors-IDVF) and Internet Protocol Address-IP Address). Marketing Data: IDFA, IDVF... These advertising partners may use this information (and similar information collected from other services) for purposes of delivering personalized advertisements to you."

Nova collects device advertising identifiers (IDFA, IDFV) and shares them with advertising partners who combine this data with information from other services to build cross-service advertising profiles.

"This includes measurement partners (Clarity) and advertising and ad analytics tools (FBSDKCoreKit, AdSupport.framework) to support app event logging, attribution, and campaign measurement. Through these tools, we and our partners may collect app activity information (such as app interactions, crash logs, and event tracking for installs or purchases) as well as develop inferences to create audience segments for advertising. ScaleUp may also transfer your personal data to services providers of our Company, third parties such as Facebook SDK, Adjust and Firebase Analytics which are embedded into our service."

Nova embeds multiple third-party SDKs (Facebook SDK, Firebase, Adjust, Microsoft Clarity, Appsflyer) directly into the app, which collect data from users' devices for analytics, advertising, and audience segmentation purposes.

"Process Security: Internet traffic data (network movements, IP address, visit data, time and date information), device name, In-app purchase history, identifier for advertisers designated in your mobile device used in accessing our services (if you give a permission, the Identifier for Advertisers-IDFA), identifier for vendors/developers designated your mobile device (The Identifier for Vendors-IDVF)."

Nova collects device-level data including advertising identifiers, vendor identifiers, device name, network movements, and in-app purchase history — some of which goes beyond what a chatbot app would need for core functionality.

"An IP address can often be used to identify the location from which a device is connecting to the Internet. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your browser and device characteristics, operating system, language preferences, referring URLs, device name, country."

Nova collects IP addresses which it acknowledges can identify user location, and shares this data with third-party advertising and analytics partners.

"We do store all conversation and personal data for up to 6 years unless your account is deleted. In which case, we dispose of all data in accordance with our Terms of Service and Privacy Policy, but we will not hold it longer than 60 days."

Nova retains all conversation data and personal information for up to 6 years, which is an exceptionally long retention period for a chatbot application, and even after account deletion data may persist for up to 60 days.

"Unless otherwise required by law, we will notify you (for example, through our Service) before we make changes to this Privacy Policy and give you an opportunity to review them before they go into effect. Then, if you continue to use the Service, you will be bound by the updated Privacy Policy. If you do not want to agree to this or any updated Privacy Policy, you can delete your account."

Nova can change its privacy policy at any time and treats continued use of the service as acceptance of new terms, leaving users with only the option to delete their account if they disagree.

"You can delete your account anytime through the Delete Account option in the settings. Once deleted, your personal data and chat history will be permanently removed, except where retention is required by applicable law. In which case, we dispose of all data in accordance with our Terms of Service and Privacy Policy, but we will not hold it longer than 60 days."

While self-service deletion is available, user data may persist for up to 60 days after account deletion, and exceptions for legal retention requirements create ambiguity about when data is truly removed.