Privacy Policy

Google user data — Google Calendar & YouTube

If you choose to connect your Google account for scheduling, Nova requests two Google Calendar permissions:

• See and download any calendar you can access (calendar.readonly) — used to list the calendars on your account, read their events so your Calendar tab shows your real schedule, read calendar colours, and check free/busy times so booking slots are only offered when you are genuinely free.
• View and edit events on all your calendars (calendar.events) — used to create, reschedule, move, and cancel events, both the bookings you receive through Nova and events you create yourself in the Calendar tab, and to attach a Google Meet link and reminders to them.

We read your calendar events only to display them to you inside your own workspace, to calculate availability, and to answer your own requests (see “Nova's AI assistant and your Google data” below). We do not sell your calendar data, use it for advertising, or use it to train AI models, and we do not share it outside your workspace.

If you choose to connect a YouTube channel for content publishing, Nova uses YouTube API Services and requests three YouTube permissions:

• Upload videos to your YouTube channel (youtube.upload) — used only to publish the videos you schedule in your content queue, with the title, description, tags, visibility, and thumbnail you set in the composer.
• View your YouTube account (youtube.readonly) — used to identify the channel you connected (name and channel id, so the app can show which channel is linked and where a post will go) and to read back the view, like, and comment counts on videos published through Nova so your queue can show how each post performed.
• Manage your YouTube account (youtube.force-ssl) — used only for two optional composer features: adding a just-published video to a playlist you chose, and posting the first comment you wrote. We never edit, delete, or otherwise manage videos, comments, or channel settings beyond those two actions.

By connecting a YouTube channel you also agree to the YouTube Terms of Service, and the Google Privacy Policy applies to Google's handling of your data.

For both Calendar and YouTube we store a secure Google refresh token so the connection keeps working; you can revoke it at any time from within Nova ("Disconnect"), which deletes the stored token, or from your Google Account permissions. Google user data is never sold, never used for advertising, and never used to train AI models.

Nova's AI assistant and your Google data

Nova is an AI assistant, so it is important to be exact about this. When you ask Nova something that needs your calendar — “what's on my Thursday?”, “move my 3pm”, “find me a free hour tomorrow” — the relevant calendar information is sent to the AI provider that powers your assistant (for example OpenAI or Anthropic) purely to generate that answer or perform that action for you. These providers act as our service providers under contract, process the data only to fulfil your request, and are contractually prohibited from using it to train their models.

We do not retain or use data obtained through Google APIs to develop, improve, or train generalized or non-personalized AI or machine-learning models — neither our own nor anyone else's. Your Google data is used only to operate features for you, inside your own workspace. If you would rather your calendar were never available to the assistant, disconnect Google; every other part of Nova keeps working.

Limited Use disclosure. Nova's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Connected social media accounts — Facebook, Instagram, TikTok, X, LinkedIn & Threads

Nova can publish your scheduled content to social media accounts you choose to connect: Facebook Pages and Instagram (via Meta), TikTok, X (Twitter), LinkedIn, and Threads. For each connected account we store:

• Account identity — the account's name, handle, id, and (for Meta) the list of Facebook Pages and Instagram business accounts you manage, so you can pick which one posts.
• An encrypted access token — issued by the platform when you approve the connection on its own consent screen; it lets Nova publish on your behalf and is stored encrypted on our servers.
• Post results and metrics — the id and link of each post published through Nova, and its public performance counts (views, likes, comments, reach) so your content queue can show how posts performed.

We use these connections for exactly one thing: publishing the posts you schedule, at the time you set, and reading back those posts' performance. We do not read your private messages, browse your feed, follow or message anyone, post anything you didn't schedule, sell your social data, use it for advertising, or use it to train AI models.

You can disconnect any account at any time inside Nova ("Disconnect"), which deletes the stored token, or revoke Nova from the platform's own settings (for example Facebook/Instagram → Settings → Apps and Websites, TikTok → Settings → Security → Apps, X → Settings → Security → Connected apps, LinkedIn → Settings → Data privacy). To request deletion of data received from Meta platforms, see our data deletion page.