Privacy Policy

This Privacy Policy explains how Nova AI Relay ("Nova AI Relay," "we," "us," or "our") collects, uses, shares, and protects information when you visit https://novarelay.io, create an account, use our dashboard, generate API keys, make API requests, purchase credits, or otherwise use our services (collectively, the "Service").

By using the Service, you acknowledge that your information will be handled as described in this Privacy Policy.

1. Information We Collect

We collect information in several ways.

Account Information

When you register or manage an account, we may collect:

• Name, username, email address, and login identifiers
• Password hashes or authentication credentials
• Account settings, roles, permissions, and security preferences
• Referral, affiliate, or promotional information

Billing and Transaction Information

When you purchase credits or use paid features, we may collect:

• Plan, credit balance, invoice, order, and payment status information
• Billing contact details
• Transaction identifiers from payment processors
• Tax, compliance, refund, dispute, and fraud-prevention records

Payment details may be processed by third-party payment providers. We do not intentionally store full payment card numbers unless a payment provider or legal requirement makes that necessary.

API Usage and Log Data

When you use API features, we may collect:

• API key identifier, account identifier, and request timestamps
• Model name, endpoint, status code, latency, request ID, and error messages
• Token usage, image usage, cached usage, cost estimates, and credit consumption
• IP address, user agent, device, region, and network metadata
• Rate-limit, abuse-prevention, security, and diagnostic signals

Prompt, Input, and Output Data

Nova AI Relay operates as an AI gateway and relay. To process your request, we transmit prompts, inputs, files, instructions, and related request data to the selected upstream AI provider and return model outputs to you.

We do not sell your prompts or outputs. We do not use your prompts or outputs to train Nova AI Relay-owned foundation models. However, upstream providers may process request data according to their own terms, policies, and data handling rules.

We may temporarily process or retain request and response data when needed for routing, debugging, abuse prevention, billing verification, safety, compliance, reliability, or customer support. Retention practices may vary depending on logs, provider behavior, account settings, and legal requirements.

Website and Device Information

We may collect:

• Browser type, device type, operating system, referring pages, and pages viewed
• Cookie identifiers, session identifiers, and authentication tokens
• Approximate location derived from IP address
• Analytics, performance, crash, and diagnostic data

2. How We Use Information

We use information to:

• Provide, operate, maintain, and improve the Service
• Authenticate users and protect accounts
• Route API requests to upstream providers
• Track usage, calculate costs, apply credits, and process billing
• Provide logs, analytics, dashboards, documentation, and support
• Detect, investigate, and prevent fraud, abuse, security incidents, and policy violations
• Monitor reliability, latency, errors, capacity, and rate limits
• Communicate service updates, security notices, billing notices, and support responses
• Comply with legal, tax, accounting, contractual, and regulatory obligations

3. How We Share Information

We may share information with:

Upstream AI Providers

We send request data to AI model providers so they can generate responses. These providers may include model vendors and infrastructure operators. Their processing is governed by their own policies and agreements.

Service Providers

We may use vendors for hosting, databases, security, analytics, payments, email, logging, customer support, monitoring, and other operational services. These providers may access information only as needed to perform services for us.

Legal, Safety, and Compliance

We may disclose information if we believe disclosure is necessary to comply with law, legal process, enforce our terms, protect users, prevent fraud or abuse, protect security, or respond to lawful government requests.

Business Transfers

If Nova AI Relay is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction.

We do not sell personal information for third-party marketing.

4. Cookies and Similar Technologies

We may use cookies, local storage, and similar technologies to:

• Keep users signed in
• Remember preferences
• Protect sessions
• Measure performance
• Understand product usage
• Prevent fraud and abuse

You can control cookies through your browser settings, but disabling cookies may affect login, dashboard, billing, or API key management features.

5. Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain accounts, resolve disputes, enforce terms, support security, satisfy legal obligations, and maintain billing and tax records.

Retention periods vary by data type. For example:

• Account records may be kept while the account is active.
• Billing and transaction records may be kept as required for tax, audit, accounting, dispute, and compliance purposes.
• API logs may be kept for security, debugging, abuse prevention, billing verification, and reliability.
• Backups may persist for a limited period before being overwritten or deleted.

When information is no longer needed, we will delete, de-identify, or aggregate it where practical and legally permitted.

6. Security

We use administrative, technical, and organizational measures designed to protect information, including HTTPS/TLS in transit, access controls, operational monitoring, and account security practices.

No internet service can be guaranteed to be completely secure. You are responsible for protecting your password, API keys, devices, source code, and environments where keys are stored.

7. International Data Transfers

The Service may be operated from, and information may be processed in, countries other than where you live. Data protection laws may differ from those in your jurisdiction. By using the Service, you understand that information may be transferred to and processed in other jurisdictions.

8. Your Choices and Rights

Depending on your location, you may have rights to:

• Access personal information
• Correct inaccurate information
• Delete personal information
• Object to or restrict certain processing
• Receive a portable copy of certain information
• Withdraw consent where processing is based on consent
• Appeal or lodge a complaint with a data protection authority

To make a request, contact support@novarelay.io. We may need to verify your identity before fulfilling a request. Some information may be retained where required or permitted by law, security, fraud prevention, billing, dispute resolution, or legitimate business needs.

9. Children's Privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact support@novarelay.io.

10. Third-Party Links and Services

The Service may link to third-party websites, documentation, model providers, payment providers, or developer tools. We are not responsible for the privacy practices of third parties. Review their policies before providing information to them.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date. Continued use of the Service after an update means you acknowledge the updated Privacy Policy.

12. Contact

Questions or requests about this Privacy Policy can be sent to support@novarelay.io.