Privacy Policy
This policy explains what personal data Nova Intelligence Machine Pte. Ltd. (UEN 202631799R, registered at 3 Gambas Crescent, #04-01, Nordcom One, Singapore 757088) collects when you use supernova-labs.ai and the Supernova API and console, how we use it, and the choices you have. We process personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA").
1. What we collect
- Account data: your email address; a salted hash of your password if you set one (we never store the password itself); the time you created the account and last signed in.
- Security data: the IP address and browser identifier of sign-in attempts and sessions, and one-time sign-in codes (stored hashed, expiring after 10 minutes).
- Billing data: your wallet ledger (top-ups, allocations, refunds), Stripe's identifiers for your payments, and the amounts charged. We do not receive or store card numbers; payments are handled by Stripe on its own pages.
- Usage data: for each API key, the number of requests and tokens processed and the resulting cost, aggregated per day. We do not store the content of your API requests or the model's responses.
- Correspondence: emails you send us.
We do not use advertising trackers or analytics cookies. The only cookie we set is the session cookie that keeps you signed in to the console.
2. How we use it
- to create and secure your account and to sign you in;
- to meter and bill your usage, to credit your wallet, and to detect fraud and abuse;
- to operate, maintain and improve the Service and to respond to your requests;
- to send transactional messages such as sign-in codes, receipts and important notices about the Service. We do not send marketing email without your consent;
- to comply with legal obligations and to establish, exercise or defend legal claims.
3. Who we share it with
We share personal data only with service providers that process it on our behalf under contract, and only as needed to run the Service:
- Stripe (payment processing) — receives your email and the amount you pay; card details go directly to Stripe.
- Lark Suite (transactional email) — receives your email address to deliver sign-in codes and notices.
- Amazon Web Services (hosting) — the website and account systems run in the United States (Oregon); the inference API runs in Japan (Tokyo). Your account data is therefore stored and processed outside Singapore, with protection comparable to the PDPA under our contracts with these providers.
We may also disclose personal data where required by law, to protect the rights or safety of any person, or as part of a merger or acquisition (in which case this policy continues to apply). We do not sell personal data.
4. Retention
- Account and billing records: for as long as your account exists and thereafter for up to 7 years as required for tax and accounting purposes.
- Sign-in codes: 10 minutes. Sessions: 30 days of inactivity. Security logs: 12 months.
- Usage metadata: retained for billing and reconciliation; content of requests and responses is not retained.
5. Your rights
Under the PDPA you may ask us for access to the personal data we hold about you and how we have used or disclosed it, and ask us to correct it. You may also close your account and ask us to delete your data, subject to records we must keep by law. To exercise these rights, email our Data Protection Officer at contact@supernova-labs.ai. We respond within 30 days.
6. Security
We protect personal data with encryption in transit (TLS), hashed credentials, least-privilege access, and separation between the website, the account database and the inference API. No system is perfectly secure; if we become aware of a data breach that is likely to result in significant harm, we will notify affected users and the Personal Data Protection Commission as required by law.
7. Children
The Service is not directed at children under 18 and we do not knowingly collect their personal data.
8. Changes
We may update this policy; the effective date above shows the current version. Material changes will be announced on the website or by email.
9. Contact
Nova Intelligence Machine Pte. Ltd., 3 Gambas Crescent, #04-01, Nordcom One, Singapore 757088. Data Protection Officer: contact@supernova-labs.ai.