Privacy Policy

1. Who we are

DataNova Consulting FZCO(“DataNova”, “we”, “us”) operates Nova — a product of DataNova Labs — including the Microsoft Teams application and web portal that provides AI-assisted analysis of Power BI semantic models and uploaded business documents. Our contact address for privacy matters is privacy@datanovalabs.com.

2. Information we collect

• Identity and account data — name, email, Microsoft Entra tenant ID, and user object ID when you sign in with Microsoft.
• Usage and billing data — queries, credit consumption, subscription status, support tickets, and portal activity required to operate the service and your organisation ledger.
• Teams and conversation metadata — conversation IDs, channel context, and message content necessary to respond to your requests in Teams.
• Power BI interaction data — semantic model selections, generated DAX, query results, and connection tokens stored encrypted for delegated Power BI access.
• Uploaded documents — files you upload in Teams for board pack review or document search, plus extracted text, embeddings, and analysis outputs. See our Data Retention Policy.
• Website data — technical logs, cookies, and analytics described in our Cookie Policy.

3. How we use information

We use personal and organisational data to provide Nova, authenticate users, enforce permissions, meter usage, process payments, respond to support requests, improve reliability, and comply with legal obligations. We do not use customer prompts, query results, or uploaded documents to train public AI models.

4. Legal bases (UK / EEA)

Where applicable, we process data on the basis of contract performance (providing Nova), legitimate interests (security, fraud prevention, product improvement), and legal obligation. Where consent is required (for example, non-essential cookies), we obtain it separately.

5. Processors and sub-processors

Nova is hosted on Microsoft Azure and integrates with Microsoft Teams, Microsoft Entra ID, Power BI, Microsoft Graph, Azure OpenAI, Azure Document Intelligence, Azure AI Search, Azure Blob Storage, Azure SQL, and Stripe (payments). SendGrid may be used for transactional email. These providers process data under our instructions and their own terms.

6. International transfers

Data may be processed in the United Kingdom, European Economic Area, and other locations where our subprocessors operate. We use appropriate safeguards where required by applicable law.

7. Retention

Retention periods vary by data type. Uploaded document content, searchable text, memory summaries, and audit logs are described in our Data Retention Policy.

8. Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict, or port personal data, and to object to certain processing. Contact privacy@datanovalabs.com to exercise these rights. You may also lodge a complaint with your supervisory authority.

9. Security

We implement technical and organisational measures including encryption in transit, encrypted token storage, tenant isolation, and access controls. See Security for an overview.

10. Changes and contact

We may update this policy from time to time. Material changes will be posted on this page. Questions: privacy@datanovalabs.com.