Legal

Privacy Policy

Last updated: May 26, 2026

Who we are

This site is operated by Nova Software LLC, a software consultancy registered in New York, United States. If you have any questions about this policy or how we handle your information, email contact@novasoftware.dev with the subject line Privacy Request.

What we collect

When you submit our contact form, you provide:

  • Your name
  • Your email address
  • Your phone number in international format (which inherently conveys your country — we do not ask for a separate country field)
  • Your company name, industry, and company size
  • The business challenges you describe and the type of software you’re looking for
  • Whether you’d like to sign an NDA before we talk
  • Any free-text message you write

In the normal course of serving the site we also process:

  • Your IP address and standard request metadata (user-agent, timestamps, paths) — processed transiently for abuse prevention (rate limiting, bot detection) and logged by our hosting provider for operational and security purposes
  • A single browser sessionStorage entry (nova-splash-seen) that prevents the intro animation from playing twice in the same browser tab. It never leaves your device and clears when you close the tab.

We do not use advertising cookies, analytics cookies, tracking pixels, tag managers, or any third-party trackers.

Why we collect it & legal basis

We use what you submit only to respond to your inquiry and discuss whether we’re a fit for the work you described. Under the EU/UK GDPR, our lawful basis is Article 6(1)(f) — legitimate interest in handling business-to-business contact requests. Where you reach out as part of exploring a potential engagement, Article 6(1)(b) (pre-contractual steps at the data subject’s request) also applies.

Who we share it with

We share your information only with the following processors, and only as needed to operate the site:

  • Vercel Inc. (United States) — hosts the site and serves it from its edge network.
  • Resend (United States) — delivers contact-form submissions to our inbox as transactional email.
  • Cloudflare, Inc. (United States) — provides DNS resolution for novasoftware.dev and powers the Turnstile anti-abuse challenge on our contact form. While the Turnstile challenge runs, Cloudflare receives your IP address and browser-environment signals so it can distinguish humans from automated submissions. Your message contents are never sent to Cloudflare.

We do not sell, rent, or trade your personal information.

International transfers

Nova Software LLC is based in the United States and the processors above operate in the United States. If you write to us from the EEA or the UK, your information will be transferred to the U.S. We rely on the relevant Standard Contractual Clauses (or equivalent safeguards) maintained by each processor.

Retention

Contact-form emails are kept in our inbox for up to 24 months after our last meaningful exchange with you, then archived or deleted. Abuse-prevention data (such as IP-based rate-limiting state) is not persisted.

Your rights — GDPR (EEA / UK)

If GDPR or UK GDPR applies to you, you have the right to:

  • Access the personal information we hold about you
  • Have it corrected if it’s inaccurate (rectification)
  • Have it deleted (erasure)
  • Restrict how we use it
  • Receive a portable copy (data portability)
  • Object to processing based on legitimate interest at any time
  • Lodge a complaint with your local supervisory authority

To exercise any of these rights, email contact@novasoftware.dev with the subject line Privacy Request. We respond within 30 days.

Your rights — California (CCPA / CPRA)

If you’re a California resident, you have the right to:

  • Know what personal information we’ve collected about you
  • Delete that information
  • Correct inaccurate information
  • Opt out of the “sale” or “sharing” of your information — we do neither
  • Not be discriminated against for exercising any of these rights

Submit requests through the same channel: contact@novasoftware.dev.

Cookies & tracking

We don’t use advertising cookies, analytics cookies, or any third-party trackers. Our fonts are self-hosted (downloaded at build time, served from our own domain), our contact form sends email directly from our server, and the only browser-side storage we use is a single sessionStorageentry to remember that you’ve already seen the intro animation in this tab.

The Cloudflare Turnstile widget on our contact form may set short-lived cookies scoped to challenges.cloudflare.com solely to detect automated abuse. Turnstile is privacy-friendly by design — Cloudflare does not use it for advertising or behavioral profiling — and it is strictly necessary for the security of our form, so no opt-in consent is required under GDPR or the ePrivacy Directive.

For the same reason, you won’t see a cookie banner on this site.

Children

Our site is intended for businesses and professionals. We do not knowingly collect information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we’ll delete it.

Changes to this policy

When we make material changes to this policy, we’ll update the “last updated” date at the top of the page. For significant changes, we may also note them here for a reasonable period.

Contact

Nova Software LLC
Suffolk County, New York, United States
contact@novasoftware.dev