Last updated: October 6, 2026
nova8 Technologies LLC, a Wyoming limited liability company ("nova8," "we," or "us"), is responsible for the personal information described in this notice. This policy covers our website, N8 site assistant, business communications, and nova8OS and Cloud Platform account administration. Personal data we process on a customer's behalf is governed by our Data Processing Addendum.
We collect information you provide directly, including name, email address, company, phone number, and message content when you use our contact form. We also automatically collect certain technical information including IP address, browser type, and device information when you visit our website. When you use our contact form or N8, we also record how you arrived at the site: the domain of the website that referred you (not its full address), any campaign tags in the link you followed (UTM parameters), the first page you visited, and whether you are using a mobile, tablet, or desktop device.
We use collected information to respond to your inquiries, provide requested services, improve our website, and communicate with you about our products and services. We do not sell your personal information to third parties. Contact form submissions are sent to our ticketing system (Zoho Desk) and customer relationship management system (Zoho CRM) so our team can respond and follow up with you.
We do not sell, rent, or share your personal information with third parties except as necessary to provide our services (e.g., hosting providers, email delivery) or as required by law. These service providers are contractually obligated to protect your data and may only use it to perform services on our behalf.
SMS consent: Providing a phone number on our contact form or to N8 does not opt you into SMS. If you separately opt into text messages, we do not sell or share your mobile number or consent with third parties or affiliates for their marketing or promotional purposes. Service providers may process that information only to deliver and administer messages on our behalf, or as required by law.
Text messages from nova8 Technologies: When you ask N8 to have someone follow up, you can give a phone number and check a separate box to receive texts about your inquiry. If you do, nova8 Technologies may text you from our business number about that inquiry. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help; you can also email support@nova8.io. Consent is not a condition of purchase. Carriers are not liable for delayed or undelivered messages. We record the date and wording of your consent with your request.
Our website offers N8, an AI assistant that answers questions from the content published on this site. When you use N8, we collect the questions you type, N8's answers, the pages you asked from, the time, a random session identifier, your approximate location (country, region, and city, which our hosting provider derives from your IP address), your browser, operating system, and device type, and how you arrived at the site as described in Section 1 (the referring website's domain, campaign tags, and the first page you visited). We do not store your IP address with your conversation.
We use conversations to improve our website and N8's answers and to understand what visitors are looking for. When a conversation ends, it is sent to our sales team through our ticketing system (Zoho Desk) or email. We do not attach contact details unless you provide them, but anything you type remains in the transcript. If you enter your email address, we email you a copy of the conversation. If you also ask us to follow up, we add your email address, your phone number and any text-message consent if you provide them, and the conversation to our customer relationship management system (Zoho CRM) so our team can contact you. Conversations are deleted from N8's storage once they are delivered, or expire after 180 days of inactivity; copies in our ticketing and customer relationship management systems are kept as part of our business records under Section 6. If conversation storage is unavailable, an exchange may not be saved or delivered; we do not write conversation content to application logs as a fallback.
To prevent abuse, N8 limits how many questions can be asked in a period of time, using a one-way hash of your IP address that is kept for no more than two days. Your questions are processed by third-party AI model providers through our AI service provider, and N8 is configured to use only providers that have agreed not to retain them. Transcript emails are sent through our email delivery provider. Please do not enter personal, confidential, or sensitive information into N8. N8's answers can be inaccurate and are not commitments or offers; contact us for anything you need to rely on.
The website runs on Vercel. N8 uses Vercel AI Gateway for model requests, Upstash Redis for conversation storage when configured, Resend for transcript emails, and Zoho Desk and Zoho CRM for the delivery described above. Vercel BotID performs browser checks and processes device, browser, and request signals to detect automated abuse. These security checks are separate from our hashed-IP rate limits.
We use technical and organizational safeguards designed to protect personal information, including access controls and encrypted connections. No system is completely secure. This notice does not represent that we hold a particular security certification or undergo a particular audit program; contractual security commitments are stated in the applicable product agreements.
We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Account information is retained while needed to administer the relationship; billing and transaction records may be retained afterward for tax, accounting, and legal obligations. Inquiry, support, ticketing, and CRM records are retained according to the ongoing business purpose and applicable legal requirements, not indefinitely merely because they were collected. The N8 storage and rate-limit periods in Section 4 apply separately to those systems. Customer Content is returned or deleted under the DPA.
Depending on applicable law, you may request access to, correction of, or deletion of your personal information, a portable copy, or restriction of or objection to processing. Where we rely on consent, you may withdraw it without affecting earlier lawful processing. You may opt out of marketing communications at any time. You may also complain to your local data protection authority and, where applicable, appeal a rights-request decision by replying to our response. To exercise rights, contact us at contact@nova8.io. We may need to verify your identity or an authorized agent's authority. We will not discriminate against you for exercising applicable privacy rights. If your request concerns data controlled by your organization, contact its administrator; we will assist that organization as required by the DPA.
We use browser storage for site functionality, including your theme preference and N8 session state. For the current browser tab only, we also keep how you arrived at the site (Section 1) so it can accompany a contact form submission or N8 conversation; it is cleared when you close the tab. Our security providers may use cookies or similar technologies for abuse prevention. We do not use advertising cookies. Vercel Web Analytics and Speed Insights measure website usage and performance without analytics cookies. Security checks described in Section 4 are not anonymous analytics and may process technical identifiers. Browser settings let you restrict storage, but doing so may affect site functionality.
For privacy questions or requests to nova8 Technologies LLC, contact us at contact@nova8.io.
For nova8OS and Cloud Platform customers, we process names, business-contact details, authentication credentials, account roles, subscription and billing records, and account-access and security records. We receive these from you, your organization or authorized reseller, and your use of the services. We act as an independent controller when using these records to administer accounts, authenticate users, manage subscriptions and invoices, prevent abuse, support customers, and meet legal obligations. Hosting, communications, authentication, and billing service providers may process these records on our behalf as needed for those functions.
Device identifiers, entitlement-validation requests, telemetry, configuration, fleet-operations data, and support submissions may contain personal data. When we process that Customer Content on your organization's behalf, the organization controls it and the DPA governs our processing. Product operations do not imply access to all information on a device. Do not submit health, payment-card, or other prohibited sensitive data as Customer Content.
The Cloud Platform is hosted by DigitalOcean, LLC in the United States. Other processing locations depend on the service providers used. Customers can request the current subprocessor list, functions, and locations under the DPA before submitting Customer Content. Where applicable law requires safeguards for an international transfer, those safeguards must be in place before it occurs; publishing this notice does not itself establish a transfer mechanism. Contact us for information about safeguards applicable to your data.
Where EU or UK data protection law applies, our legal bases are our legitimate interests in responding to business inquiries, administering organizational accounts, operating and securing our services, and improving the website; performance of a contract where you are personally a party to it; compliance with legal obligations; and consent where required, such as for certain marketing. You may object to processing based on legitimate interests. We do not use N8 to make decisions about you that produce legal or similarly significant effects.
Where California privacy law applies, the categories we collect include identifiers and business-contact details, commercial and subscription records, internet or network activity, approximate location, and information you include in messages or support requests. Sources, purposes, recipient categories, and retention criteria are described above. Account credentials are sensitive personal information used for account access and security. We do not sell personal information or share it for cross-context behavioral advertising. Applicable access, correction, deletion, and authorized-agent requests can be submitted using Section 9.
Our website and services are intended for business users, not children under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can address it. We may update this notice and will revise the date above. For material changes, we will provide additional notice as required by applicable law and obtain consent where required. Changes to this notice do not amend an existing product agreement or authorize an otherwise unlawful use of previously collected data.