Privacy Policy

Nova is a customer-messaging and CRM product operated by DM Titan. This policy covers the Nova application at app.dmtitan.net. Contact us at [email protected].

Nova is used by businesses to manage their own customer conversations. Where a business uses Nova to handle messages from its customers, that business is the controller of those messages and Nova processes them on its behalf.

Account details. Your name and email address, and a password stored only as a salted hash — never in a readable form.

Connected accounts. When you connect a channel, we store what is needed to send and receive on your behalf: for WhatsApp, Facebook and Instagram, the access token Meta issues for your account; for mailboxes, either an OAuth token from Google or Microsoft, or the server settings and password you supply. Credentials are encrypted at rest.

Conversations and contacts. Messages sent and received through your connected channels, and the contact records built from them — names, phone numbers, email addresses and the notes your team adds.

Files. Attachments and media you or your customers send.

Operational data. Sign-in sessions, and logs needed to run and secure the service.

To deliver the service: showing your inbox, sending and receiving messages on the channels you connect, and keeping your contacts and pipeline up to date.

To generate AI replies and summaries, where you enable them. To secure the service, prevent abuse, and provide support.

We do not sell personal data, and we do not use your customers' messages to train our own models.

When an AI feature runs, the relevant message content and business context are sent to the AI provider configured for your workspace — such as OpenAI, Anthropic or OpenRouter — to generate a reply or summary. That processing is governed by the provider's own terms. If no AI provider is configured, no content is sent anywhere for AI processing.

Messaging platforms — Meta (WhatsApp, Messenger, Instagram), Telegram, and others you connect, in order to deliver your messages.

Email providers — Google, Microsoft, or the mail server you configure.

AI providers — only as described above.

Payments — Stripe, where paid plans are used. We never see or store full card details.

Hosting — our servers and the network in front of them. We share data with these providers only to run the service, never for their own marketing.

Data is stored on servers in Germany. We keep it for as long as your account is active. When you disconnect a channel, its stored credentials are erased immediately; past conversations remain in your inbox until you delete them or close your account.

You can delete contacts, conversations and connected accounts at any time from within Nova. To delete your account and everything in it, email [email protected] from your account address, or write to us with the subject “Delete my data”. We action deletion requests within 30 days and confirm by email.

Deleting your account removes your workspace and its contacts, conversations, messages, files and stored credentials. Records we must keep for legal or accounting reasons — such as invoices — are retained only for as long as the law requires.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to certain processing, and to complain to your data protection authority. Email us at [email protected] and we will respond within 30 days.

Access to the service requires authentication. Stored credentials for connected channels and mailboxes are encrypted at rest, passwords are stored only as hashes, and traffic is encrypted in transit. No system is perfectly secure, but we work to protect your data and will notify you of a breach affecting it as required by law.

We will update this page when our practices change and revise the date above. Material changes will be notified to account holders by email.