Privacy Policy

Nova Vision AI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data when you use our AI-powered image, video, and chat generation platform at novavisionai.space.

By using our service, you agree to the practices described in this policy. If you do not agree, please do not use the service.

1. Information We Collect

Account information: When you register, we collect your full name, email address, and a securely hashed password. If you sign in using Google, we receive your name, email address, and profile picture from Google's authentication service.

Email OTPs: When you request a one-time password (OTP) for login or sign-up, we store your email, a hashed or encrypted OTP code, its expiry time, and attempt count. OTPs are automatically invalidated after use or expiry.

Chat messages: If you are signed in, the messages you send and receive in the AI Chat feature are stored in our database and linked to your account. This allows you to access conversation history across sessions.

Generated media: Prompts you submit for image or video generation, along with the resulting output URLs, may be stored in your account history if you are logged in.

Usage data: We may collect anonymized server logs including IP addresses (hashed for rate limiting), browser type, and request timestamps. These are used for security, abuse prevention, and service improvement only.

Cookies and sessions: We use a session cookie to keep you logged in. This cookie is HTTP-only and expires based on your session settings. No third-party advertising cookies are placed by default.

2. How We Use Your Information

• To authenticate you and maintain a secure session
• To deliver AI-generated responses, images, and videos
• To save and display your chat history and media generations in your dashboard
• To send OTP verification emails for login and registration
• To enforce rate limits and prevent service abuse
• To improve and maintain the stability of the platform
• To respond to your support or privacy requests

We do not sell your personal data to third parties. We do not use your prompts or generated media for advertising purposes.

3. Third-Party AI Providers

Nova Vision AI sends your text prompts to third-party AI providers (OpenAI and xAI/Grok) to generate responses and images. These providers process your prompts according to their own privacy policies:

• OpenAI Privacy Policy
• xAI Privacy Policy

We recommend reviewing these policies. We do not send any personally identifiable account information (such as your name or email) to these providers — only your text prompts and generation settings.

4. Google Login

If you choose "Continue with Google," we receive your name, email address, and Google profile picture via Google OAuth 2.0. We do not receive your Google password or payment information. Your Google data is only used to create and identify your account on Nova Vision AI.

You can review Google's privacy practices at policies.google.com/privacy.

5. Data Retention

• Account data: Retained while your account is active. You may request deletion at any time.
• Chat history: Retained until you delete individual chats or your account.
• Generated media: Output URLs are stored in your dashboard history. The actual image/video files are hosted by the AI provider and may expire per their policies.
• OTPs: Expired or used OTPs are cleaned up automatically within 1 hour.
• Rate limit logs: IP-based rate limit files are removed after 1 hour.

6. Data Security

We take reasonable technical measures to protect your data:

• Passwords are hashed using bcrypt with a cost factor of 12 — your plain-text password is never stored
• Sessions use HTTP-only, SameSite cookies
• All database queries use prepared statements to prevent injection attacks
• API keys and credentials are stored only in server-side configuration files
• CSRF tokens are validated on all authenticated form actions

No system is perfectly secure. In the event of a security breach affecting your personal data, we will notify affected users as required by applicable law.

7. Your Rights

Depending on your location, you may have rights regarding your personal data, including:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and all associated data
• Portability: Request an export of your chat history
• Objection: Object to specific uses of your data

To exercise any of these rights, contact us using the details below.

8. Children's Privacy

Nova Vision AI is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect changes. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

10. Contact Us