Nova Privacy Policy

1. Controller and legal framework

The data controller for Nova is Troyan Technology. This policy is interpreted under Ecuador's Organic Law on Personal Data Protection (LOPDP), its General Regulation (Executive Decree 904), and, where applicable based on user location or international operations, under standards compatible with GDPR and CCPA/CPRA.

2. Scope

This policy applies to the use of the Nova website, updates forms, and product-related communications.

3. Information we collect

We may collect:

• Email address submitted through the updates form.
• Language selected at the time of registration (es or en).
• Registration date and time in UTC format.
• Basic technical browsing data (for example, browser type and technical error events).

4. Processing purposes

• Send updates about Nova launch and product improvements.
• Communicate iOS and Android availability.
• Improve service experience, security, and stability.
• Comply with applicable legal obligations.

5. Legal basis for processing

We process data based on: data subject consent (for example, when submitting an email), legitimate interest to operate and protect the service, legal obligations, and, where applicable, pre-contractual measures requested by the user.

6. Data retention

We keep your data only for as long as necessary to fulfill the purposes described above, or until you request deletion, unless the law requires a longer retention period.

7. Processors, transfers, and disclosure

We do not sell your personal information. We may share data with processors (technology or infrastructure providers) under contractual confidentiality and security obligations, or when legally required by a competent authority. If international data transfers occur, we apply reasonable safeguards.

8. Security

We apply reasonable technical and organizational measures to protect your information. No system is 100% invulnerable, so we continuously improve our controls.

9. Minors

Nova is not intended for minors without authorization from a legal guardian. If we detect minor data without valid authorization, we will delete it.

10. Data subject rights

Under LOPDP and applicable rules, you may exercise rights of access, rectification and update, deletion, objection, portability, processing suspension, and withdrawal of consent where applicable. You may also request information about how your data is used and shared.

11. Rights requests and supervisory authority

To exercise your rights, contact privacy@troyantech.com and include your request plus the registered email. We will respond within applicable legal deadlines. If you consider your request has not been properly addressed, you may file a claim before Ecuador's Data Protection Superintendency.

12. Changes to this policy

We may update this policy to reflect product improvements or regulatory changes. We will always publish the latest update date on this page.