Privacy Policy

Last updated: April 21, 2026

1. Introduction

Nova AI Diagnostics ("we", "us", "our"), operated by NOVA ECOSYSTEM SINGLE MEMBER P.C. (AI Platforms — Applications — Automation), with registered office at Georgiou Seferi 5, Heraklion, Crete, Greece, provides an AI-powered code scanning service. This Privacy Policy explains what data we collect, how we use it, and your rights under GDPR and other applicable privacy laws.

2. Information We Collect

• Account data: email address, display name, authentication identifiers.
• Scan data: code snippets, files, URLs, or repositories you submit for analysis.
• Usage data: scan history, health scores, timestamps, AI reports.
• Payment data: processed by a PCI-compliant third-party payment processor; we never store full card details.
• Cookies & analytics: we use first-party cookies and basic analytics to maintain sessions and measure performance. No advertising trackers.

3. How We Use Data

• To perform AI-powered code analysis and return diagnostic reports.
• To maintain your scan history in your dashboard.
• To process subscription payments and verify access.
• To improve service reliability, security and prevent abuse.

4. Third-Party Services

• Supabase (EU region) — authentication, database, edge functions. Privacy.
• AI provider — large language model used to generate diagnostic reports from the code, URLs or files you submit.
• Paddle.com Market Ltd. — Merchant of Record, PCI-compliant subscription billing on the website. Privacy.
• Google Play Billing / RevenueCat Inc. — used only inside the Android app for in-app subscription processing. Privacy.
• GitHub (Microsoft) — public REST API used only when you submit a public repository URL for scanning. Privacy.
• Lovable — application hosting and CDN. Privacy.

All providers act as data processors under Article 28 GDPR. We do not sell personal data. Code, URLs or files submitted to the scanner are transmitted to our AI provider for analysis and to our database for your scan history; they are not used to train third-party models.

4a. Cookies

We use only strictly necessary first-party cookies to maintain your authenticated session and to remember your cookie choice. We do not use advertising cookies or third-party tracking cookies. You can withdraw consent at any time by clearing the cookie nova_cookie_consent_v1 in your browser.

4b. Right of withdrawal & account deletion

You may delete your account, scan history and personal data at any time directly inside the app: open your Dashboard → "Delete my account". Deletion is immediate, permanent and free of charge. You may also email support@novaecosystem.live.

5. Data Retention

Scan data and reports are retained while your account is active. You may request deletion at any time by contacting support.

6. Security

We use strict per-user access controls, encrypted transport (HTTPS), and server-side authentication. No system is 100% secure; use the service responsibly.

7. Your Rights (GDPR)

You have the right to access, rectify, export, restrict processing of, or delete your personal data. You may also withdraw consent or lodge a complaint with your local data protection authority (in Greece: Hellenic Data Protection Authority — www.dpa.gr). Contact: support@novaecosystem.live

8. Children

This service is not intended for users under 13. We do not knowingly collect data from children.

9. International Transfers

Data may be processed in the EU or the United States by our service providers under standard contractual clauses or equivalent safeguards.

10. Changes

We may update this policy. Continued use after changes means acceptance.

11. Contact

Data Controller: NOVA ECOSYSTEM SINGLE MEMBER P.C.
Address: Georgiou Seferi 5, Heraklion, Crete, Greece
Email: support@novaecosystem.live