Privacy Policy

Account Information

When you create an account, we collect:

• Name and email address (via Clerk authentication)
• Password (encrypted and managed by Clerk - we never see it)
• Profile preferences (currency, theme)

Financial Data

When you connect accounts or add manual accounts:

• Account balances and transaction history
• Institution names and account types
• Investment holdings and performance data
• Property and vehicle valuations

We use your information to:

• Calculate your net worth and financial metrics
• Provide spending analytics and insights
• Generate budget recommendations
• Detect recurring subscriptions
• Track financial goals and progress
• Send notifications about your accounts (with your permission)
• Improve our services and develop new features

We implement industry-standard security measures:

• Encryption: All data encrypted at rest and in transit (TLS/SSL)
• Authentication: Multi-factor authentication available via Clerk
• Access Control: Strict user data isolation
• Token Management: Encrypted access tokens, never plain credentials
• Regular Audits: Security reviews and updates
• Database Security: Hosted on secure infrastructure (Vercel/Supabase)

We use the following trusted third-party services:

Clerk (Authentication)

Manages user authentication and profile data.Clerk Privacy Policy

Plaid (Financial Data Aggregation)

Securely connects to your financial institutions. Plaid uses bank-level encryption.Plaid Privacy Policy

Yodlee (Alternative Aggregator)

Optional financial data aggregation for additional institution coverage.Yodlee Privacy Policy

Vercel (Hosting & Analytics)

Hosts our application and provides basic analytics (page views only).Vercel Privacy Policy

You have the right to:

• Access: View all data we have about you
• Export: Download your data (CSV/PDF export available in app)
• Delete: Request account deletion (removes all your data)
• Correct: Update incorrect information
• Opt-out: Disable notifications and data collection
• Disconnect: Remove linked accounts at any time

To exercise these rights, go to Settings → Account or contact us at privacy@novanetworth.com

We retain your data:

• Active accounts: As long as your account is active
• After deletion: 30 days (for recovery), then permanently deleted
• Logs and analytics: Aggregated, anonymized data for 90 days

We use minimal cookies:

• Essential cookies: Authentication and session management (required)
• Preference cookies: Remember your theme and settings
• Analytics cookies: Google Analytics for usage patterns (optional)

You can disable analytics cookies in your browser settings. Essential cookies are required for the app to function.

Nova complies with GDPR (EU), CCPA (California), and other privacy regulations. Your data is stored on servers in the United States. By using Nova, you consent to this data transfer and storage.

Nova is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us immediately.

We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification. Your continued use of Nova after changes constitutes acceptance of the updated policy.