Privacy

Short version

Nova helps you track your net worth across accounts. If you create an account and connect institutions, we store the financial data needed to build your balance sheet (described below). If you only sign up for product updates, the only thing we hold is your email address. We do not show advertising, run ad-network tracking pixels, or sell your data. Optional product analytics is available through PostHog and Vercel Web Analytics/Speed Insights (listed below): browser analytics is not loaded or sent until you accept, and your choice is stored locally in your browser. You can delete your account at any time from your account menu, or request deletion by emailing hello@novanetworth.com.

What we collect

• Email address you submit for product updates.
• If you create an account: your email and authentication metadata (via Clerk), and your subscription status (via Stripe).
• How you found us. On the first page you view in a browser tab, Nova keeps the campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_content), any referral code (ref), the page path you landed on (without the rest of the address), and the referring site's domain in that tab's session storage. No cookie is set, and it is discarded when the tab closes. If you create an account in that tab, these values pass through Clerk with your sign-up and are saved with your account so we can count signups by channel. They are not sent to PostHog.
• Your answer, if you give one, to the optional onboarding question about owning through an LLC, trust, or rental property.
• If you connect a bank or brokerage: account names and types, balances, holdings, and (when authorized) transactions and tax-lot cost-basis data. Access tokens and connection secrets are encrypted at rest (AES-256-GCM). We never receive or store your institution login credentials.
• Standard server logs (IP address, browser user-agent, timestamp) for security and rate limiting. Our hosting, monitoring, and rate-limiting providers keep these under their own standard retention windows; see “How long we keep data” below.
• If you try to connect a bank through Plaid: the outcome of each attempt (opened, connected, error, or exited), the institution’s public name and Plaid ID, Plaid’s error code and the step where you left, and Plaid’s session and request IDs. We use this to see which banks fail to connect and why. It never includes your credentials, account names or numbers, or tokens. It is not sent to PostHog; when you delete your account, these records are detached from it.
• Feedback you send with the in-app “Send feedback” form: the type you pick (bug, idea, question, or praise), your message, the page you were on (with ids, links, and the rest of the address removed), the app version, whether you said it’s OK to contact you, and when you sent it. It never includes your balances or account details. It is not sent to PostHog.

Who sees your data

People and tools you choose

Some features show your data to people or software you pick. They only start when you set them up, and you can end them:

• People you invite to an entity see its data at the role you choose. A member can view and update it; an advisor can only view it. Only the owner can change who has access. Nova emails the invitation to the address you enter.
• If you share ownership of an entity with another Nova user, that person can see that entity and what it owns, but not the entities above it in your structure.
• If you share a tax-loss-harvesting scenario, anyone with the link can view that one scenario, read-only, until you delete it.
• If you create a personal access token on the Developer page or connect Nova to an AI assistant over MCP, that tool can read your net worth, net-worth history, accounts, holdings, and transactions until the token expires or you revoke it on the Developer page. Tokens are read-only; they cannot change your data. Each request made with a token is recorded in the activity log described below, including which token made it. What that tool and its provider do with the data is governed by their terms, not ours.

Service providers

These companies process data for us to run Nova. Each receives only what it needs for its job:

• Vercel — hosting and edge logs. Only if you accept analytics: Vercel Web Analytics and Speed Insights (cookieless page-view and page-performance metrics).
• Resend — transactional email delivery (account, billing, and activation emails). Receives your email address and the content of each email we send you. Nova does not keep a contact list or audience with Resend.
• Clerk — authentication and account session management. Stores your email address, hashed credentials, and session metadata. Clerk uses Cloudflare Turnstile to block bots on sign-up, so Cloudflare receives your IP address and browser details on the sign-up form.
• Plaid — bank and brokerage account connectivity. When you connect an institution, Plaid (acting as our service provider) collects credentials directly from you and returns access tokens, account metadata, balances, and (when authorized) transactions to Nova. See Plaid’s End User Privacy Policy.
• SnapTrade — read-only brokerage connectivity used to import balances and positions (and, where enabled, broker-reported tax-lot cost basis). When you connect a brokerage, SnapTrade returns account metadata, balances and holdings to Nova; we never place trades, move money, or change your account settings. SnapTrade says it is SOC 2 Type II compliant and that it encrypts data in transit and at rest. See SnapTrade’s Privacy Policy.
• Stripe — subscription billing and payment processing. Card details are entered into Stripe’s hosted checkout and never touch Nova servers; we receive only a customer ID, subscription state, and the last four digits of your card. See Stripe’s Privacy Policy.
• Supabase — managed Postgres database hosting. Stores your Nova account data, including connected-account balances, holdings, transactions, and entity structure.
• OpenAI — used only when you click “Explain this Math” on a suggestion. Nova sends that suggestion and a snapshot of the finances of the entity it is about: account names, types, and balances; debt interest rates; holdings (symbol, quantity, cost basis, purchase dates, and tax lots); recent purchases; estimated monthly expenses; your marginal tax rates; and net-worth history. It does not include your email address, account numbers, or login credentials. OpenAI’s API writes the plain-English explanation. The suggestions themselves are computed by Nova’s own rules, not by OpenAI.
• Sentry — error monitoring. Receives error reports and technical diagnostics. Default personal-data collection is off, and sensitive fields are scrubbed before sending.
• Upstash — rate limiting and caching. Receives IP addresses and account identifiers used as rate-limit keys, and stores cached valuation results.
• RewardsCC (via RapidAPI) — credit-card rewards data for a card-rewards feature that is not generally available. Receives card names you search for and catalog card identifiers matched to your credit-card accounts, not your transactions, balances or contact details. Card artwork images load directly from the vendor's servers in your browser, so the vendor can see your IP address and browser details.
• ATTOM — automated real-estate valuation. Receives the property address you enter, when you add the property and again when Nova refreshes its value weekly.
• Loqate (a GBG company) — address autocomplete. Receives the address text you type when adding a property.
• Smarty — backup address autocomplete. Receives the address text you type when adding a property.
• MarketCheck — vehicle valuation. Receives the VIN, mileage, and ZIP code you enter, when you add the vehicle and again when Nova refreshes its value weekly.
• NHTSA vPIC — public U.S. government VIN decoder. Receives only the VIN you enter.
• Metals.dev, CoinGecko, and JustTCG — market price feeds for precious metals, crypto, and trading cards. No personal data is sent; we send only what identifies the metal, coin, or card.
• PostHog — optional product analytics. The browser SDK loads only after you accept, then receives page views and named product events. It is configured with memory-only persistence, so PostHog sets no cookie or local-storage identifier; Nova stores your consent choice (and, after you accept, a one-time signup marker) locally in your browser. Person profiles are created only for signed-in users, keyed to an opaque account ID. Separately, when a paid subscription starts and you had accepted analytics in the browser you checked out from, our server sends PostHog one “subscription completed” event keyed to that same opaque ID, carrying only the plan type and no amounts or other personal details. Automatic click capture and session recording are off.
• Frankfurter — public foreign-exchange rate feed used for non-USD account valuation. No personal data is sent; we query only currency codes (e.g. “EUR”, “GBP”).
• FRED (Federal Reserve Economic Data) — public U.S. Treasury yield feed used to benchmark idle-cash and savings-rate suggestions. No personal data is sent; we query only public economic-data series.
• Discord — operations notifications, only if we have enabled them. When you send in-app feedback, a short excerpt (its type and the first 300 characters of your message, without your name or email) is posted to our private operations Discord channel, with a short one-way code in place of your account ID. Separately, if we show a “Join the Nova community” link and you follow it, Discord’s own privacy policy covers what you do there.

We do not sell or rent your information.

How long we keep data

• Account and connected financial data: while your account is active. Inactive accounts are deleted after 24 months with no sign-in. We email a notice at least 30 days before the deletion date, and signing in before then keeps your account. Deletion works the same way as deleting your account yourself (below). Accounts with an active or past-due subscription are not deleted for inactivity.
• Activity log: 2 years. Nova records changes you make (for example renaming an account, inviting someone to an entity, which includes the invitee’s email address, sharing a scenario, or acting on a suggestion), each read-only API request (including the requesting IP address), how you found us, your answer to the onboarding ownership question, and bank-connection attempts. When you delete your account these entries are detached from it rather than deleted, and they are removed once they are 2 years old.
• Feedback messages: kept until you delete your account, and deleted with it. If operations notifications are enabled, the short excerpt posted to our private Discord channel carries no name, email, or account ID and is not removed automatically; email us to have it deleted.
• Webhook and processing records from our providers: 30 days. Suggestions: 90 days once dismissed or expired, and 180 days at most.
• Database backups: our database provider’s 7-day backup cycle.
• Server, error, and rate-limit logs held by our hosting, monitoring, and rate-limiting providers: each provider’s standard retention window.
• Product-update email addresses: until you unsubscribe or ask us to delete them.

When you delete your account, Nova cancels any active Stripe subscription, removes your Plaid connections, deregisters your SnapTrade user, deletes your Clerk sign-in, and deletes your Nova account and everything stored under it: connected accounts, balances, holdings, transactions, entities, goals, saved scenarios, and feedback you sent. The activity log entries above are the exception. Legal, fraud-prevention, billing, or security records may be kept longer when required; Stripe keeps its own billing records under its privacy policy.

Cookies and browser storage

Nova uses no advertising or cross-site tracking cookies. What it stores in your browser:

• Sign-in cookies set by Clerk, our authentication provider, to keep you signed in. Required.
• Cloudflare Turnstile, which Clerk uses to block bots on the sign-up form. It checks your browser and may set its own short-lived data. Required for sign-up.
• Three Nova preference cookies, kept for up to a year: nova_theme (light or dark mode), nova_sidebar (whether the sidebar is collapsed), and nova_privacy (whether balances are hidden).
• Local storage: your analytics choice (nova_analytics_consent), whether you have seen the explanation on a suggestion card, and, only after you accept analytics, a one-time signup marker.
• Session storage, cleared when you close the tab: how you found us (see above), a temporary Plaid Link token while you connect a bank, and whether you dismissed the first-account prompt.
• Stripe sets its own cookies on its hosted checkout page, which Stripe’s privacy policy covers.

Optional analytics (PostHog and Vercel Web Analytics) does not set cookies and does not load until you accept it.

Do Not Track and Global Privacy Control

Nova does not sell your personal information or share it for cross-site advertising. If your browser sends a Global Privacy Control signal and you haven’t made a choice on our analytics banner, Nova treats that as declining optional analytics: the browser analytics never load and the banner doesn’t ask. Nova does not respond to the older Do Not Track signal, because it doesn’t track you across other sites and optional analytics already stays off until you accept it.

Children

Nova is not directed to children. You must be at least 18 to create an account, and we do not knowingly collect personal information from children under 13. If you believe a child has given us information, email us and we’ll delete it.

Your rights

Nova is offered only to residents of the United States. You can request access, correction, or deletion of your data. California residents have CCPA rights, and residents of other states with consumer privacy laws may have similar rights; we honor these requests for every user, whichever state you live in. Email us and we’ll respond within 30 days. Signed-in users can delete their account from their account menu. When you delete your account, we remove your data from Nova (apart from the detached activity log described above) and revoke our connections at Plaid and SnapTrade, so they stop sending us your account data. You can also export your balance sheet and history as CSV at any time from your dashboard.

Contact

Nova is operated by Nova Net Worth LLC, a Wyoming limited liability company.

hello@novanetworth.com

Changes to this policy

When we change this policy we update the date at the top of this page and add a line to the change log below. If a change is material, such as sharing your data in a new way or using it for a new purpose, we also email account holders about it.

• October 6, 2026: described in-app feedback (what a message stores, that it is deleted with your account) and added Discord for optional operations notifications.
• October 6, 2026: described inactive-account deletion (24 months with no sign-in, notice emailed at least 30 days before).
• October 5, 2026: clarified that personal access tokens are created and revoked on the Developer page, are read-only, and that each request made with one is recorded in the activity log.
• October 3, 2026: stated that Nova is offered only to US residents and replaced the EU/UK (GDPR) rights reference with US state privacy rights; added a children’s privacy statement (Nova is not directed to children and accounts require age 18 or older).
• October 3, 2026: added who sees your data (including sharing you set up yourself), cookies and browser storage, Do Not Track and Global Privacy Control, a fuller retention list, and this change log. Clarified what OpenAI receives and when property and vehicle values are refreshed.
• October 1–2, 2026: added the analytics consent choice, self-serve account deletion, signup-source records, and Plaid connection records; corrected the Resend description.
• September 28–30, 2026: corrected the AI disclosure and the service-provider list (added RewardsCC and Loqate).