Nova is operated by Novanest Pro, Inc. ("Nova", "we", "us") in Los
Angeles, California. This policy explains what data we collect, how we
use it, and who we share it with when you use the Nova service.
1. Who we collect data about
- Operators (Thumbtack pros) who sign up for Nova.
- Customers who message your Thumbtack business and
whose messages we relay on your behalf.
2. What we collect
From operators:
- Account info: name, business name, email, optional phone number.
- Thumbtack OAuth tokens (encrypted at rest).
- Your business preferences: working hours, custom reply rules, schedule, language.
- Telegram chat ID (only if you link the Nova bot).
- Operational logs of replies sent and AI generation timing. Tokens and credentials are never logged in plaintext.
From your customers:
- The content of messages they send to your Thumbtack business via the Partner API.
- Photos or attachments they share in those messages.
- Lead form data Thumbtack collects (category, zip, project details, customer name).
3. How we use your data
- To generate and (when you authorize it) send replies on your behalf.
- To run the booking-detection, follow-up, and notification features you enable.
- To improve Nova's accuracy. We do not train third-party AI models on your data; we send messages to the LLM provider only for the live reply that needs to be generated.
- To send operational notifications to you via Telegram (and, if you turn it on, via phone call when a lead books).
4. Who we share with (sub-processors)
We use the following service providers to run Nova:
- Amazon Web Services — hosting (US, ECS Fargate).
- OpenRouter — LLM gateway, which routes to Anthropic, Google, and OpenAI.
- Telegram — operator notifications and draft approvals.
- Thumbtack, Inc. — the Partner API itself (incoming leads, outgoing replies).
We do not sell your data and we do not share it with anyone outside this list.
5. Where data is stored
All data is stored in the United States, on AWS (us-east) and MongoDB
Atlas. We do not currently offer EU-region hosting.
6. Retention
- Conversation messages: retained for as long as your Nova account is active so the AI has context.
- OAuth tokens: deleted immediately when you disconnect Thumbtack.
- Account data: deleted within 30 days of account closure on request.
7. Your rights
You can request a copy or deletion of your data at any time by emailing
contact@novanestpro.com.
Customers whose messages you've received through Thumbtack should
first contact Thumbtack — they are the controller of the original
relationship — and we will cooperate with any data-subject request
you forward to us.
8. Security
OAuth tokens are encrypted at rest. Connections use TLS. Operator
accounts are isolated by business_id. Telegram bot and Nova API are
rate-limited.
9. Changes
If we materially change this policy, we'll email operators on file
and update the "Last updated" date above.
10. Contact
Novanest Pro, Inc.
San Francisco, California, USA
contact@novanestpro.com