Legal

Privacy Policy

Last updated: June 29, 2026 · Effective immediately upon use of any Nova service.

1. Who We Are

Neon Quantum Systems Ltd. ("Nova," "Neon Tech," "we," "us," or "our") is a global technology company headquartered in Nigeria, operating internationally. We develop and operate Nova (nova.neontechhq.com) — an AI-powered business communication assistant — and related services including Nova Pay (in-conversation payment processing). Our primary contact email is info@neontechhq.com.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use Nova — including Nova's AI messaging automation across WhatsApp, Instagram Direct, Facebook Messenger, and TikTok. This policy applies globally to all users, business operators, and end users.

We are committed to protecting your privacy in accordance with the Nigeria Data Protection Act (NDPA) 2023, the EU General Data Protection Regulation (GDPR), the UK GDPR, and TikTok's Platform Terms and Developer Terms where applicable.

2. Information We Collect

Information you provide directly:

  • Name, email address, phone number, and business name when registering for Nova
  • Business information during onboarding (business description, operating hours, custom AI instructions)
  • Account credentials and preferences when accessing your Nova dashboard
  • Payment and billing information (processed via our payment partners — we never store card numbers)

Information collected through TikTok integration:

When a business operator grants Nova access to their TikTok account via TikTok's official OAuth 2.0 authorisation flow, we collect and process:

  • TikTok account identifiers (open_id, union_id) for authenticated business account access
  • Video content, captions, and scheduling instructions provided by the business for content posting via the TikTok Content Posting API
  • Comment data — including commenter identifiers and comment text — accessed via the TikTok Comment API to enable AI-powered comment moderation and responses on behalf of the business
  • Direct Message content sent to the business TikTok account, processed to generate AI-powered replies on behalf of the business operator
  • Account analytics, engagement metrics, and follower data accessed to provide businesses with performance insights
  • OAuth access tokens and refresh tokens required to maintain authorised account access — we never collect, store, or have access to your TikTok account password or login credentials
TikTok data use: We use TikTok platform data exclusively to deliver the Nova service to the business operator who authorised access. We do not use TikTok data for advertising, profiling, resale, or any purpose beyond the authorised Nova features. Business operators may revoke Nova's TikTok access at any time through their TikTok account settings.

Information collected through Meta integrations (WhatsApp, Instagram, Facebook Messenger):

  • WhatsApp phone numbers and display names of end users who message a Nova-connected business number
  • Message content (text, audio, images, documents) sent to and received from Nova-connected channels
  • Conversation history retained to enable contextual, memory-aware AI responses
  • Instagram user identifiers and Direct Message content when the Instagram channel is connected
  • Facebook Messenger user identifiers, Page IDs, and message content when the Facebook channel is connected
  • WhatsApp Business Account (WABA) identifiers and phone number IDs during onboarding via Meta Embedded Signup
  • OAuth access tokens issued by Meta when businesses connect their WhatsApp, Instagram, or Facebook accounts to Nova

Information collected automatically:

  • IP address and approximate geographic location
  • Browser type, operating system, and device type
  • Pages visited, referral source, and navigation patterns (analytics cookies — only with your consent)

3. How We Use Your Information

  • To operate Nova — processing inbound messages, generating AI-powered responses, and maintaining conversation context on behalf of authorised business operators
  • To enable TikTok account management features where authorised — including publishing posts, reading and responding to comments, accessing analytics, and managing DM conversations via the TikTok for Business API
  • To enable Instagram Direct and Facebook Messenger message handling where authorised via Meta APIs
  • To enable WhatsApp Business messaging where authorised via the WhatsApp Business API
  • To process payments and send transaction confirmations via Nova Pay
  • To send transactional communications (OTP codes, account alerts, invoices)
  • To detect, investigate, and prevent fraud, abuse, and security threats
  • To comply with legal obligations under the NDPA 2023, EU GDPR, UK GDPR, and TikTok's Platform Terms
  • To improve Nova's AI response quality using strictly anonymised, aggregated data only — raw personal message content is never used for model training without explicit written consent from the business operator
No deceptive impersonation — across all channels including TikTok: Nova does not permit any business operator to configure Nova to actively claim to be a human agent or to deny being an AI when sincerely asked by an end user. This applies across all channels — WhatsApp, Instagram, Facebook Messenger, TikTok, and any other integration. Violations result in immediate account termination.

4. TikTok Platform Data — Full Detail

Nova integrates with TikTok for Business through the TikTok Content Posting API, TikTok Comment API, TikTok Direct Message API, and TikTok Login Kit. Our use of TikTok platform data is governed by TikTok's Platform Terms of Service and Developer Terms, in addition to this Privacy Policy.

What we access:

  • TikTok account identifiers for authenticated access on behalf of the business operator
  • Video and content data provided by the business for scheduling and posting
  • Comment data for AI-powered moderation and responses
  • DM content for AI-powered customer replies
  • Analytics and engagement metrics for business performance insights
  • OAuth tokens to maintain authorised API access

What we do not do with TikTok data:

  • We do not use TikTok data for advertising or marketing profiling
  • We do not sell or transfer TikTok data to any third party for their own independent use
  • We do not store TikTok account passwords or login credentials
  • We do not access TikTok data beyond what is necessary to deliver the authorised Nova service
  • We do not retain TikTok data after account termination beyond legally required periods

TikTok webhook events received by Nova are validated using TikTok's authorised signature verification mechanism before processing. Payloads failing verification are rejected.

Business operators may disconnect Nova from their TikTok account at any time through their TikTok account settings (Settings → Security → Connected Apps). Upon disconnection, Nova immediately loses API access. Stored data associated with the account is deleted within 90 days of account termination.

5. Meta Platform Data (WhatsApp, Instagram, Facebook Messenger)

Nova integrates with Meta Platforms Inc. services as an authorised Meta Business Solution Provider (BSP). Our collection and use of Meta platform data is governed by Meta's Platform Terms and Privacy Policy, in addition to this Privacy Policy.

  • We access WhatsApp, Instagram, and Facebook Messenger data solely to deliver AI-powered automated responses on behalf of authorised business operators
  • We do not use Meta platform message content for advertising, profiling, or any purpose beyond delivering the contracted Nova service
  • We do not sell or share Meta platform user data with any third party for their own independent use
  • End users interacting with a Nova-connected business are interacting with an AI-powered automated system — business operators are responsible for disclosing this clearly
  • Meta webhook events are validated using HMAC-SHA256 before processing

6. Data Sharing and Third Parties

We do not sell your personal data. We share data only with service providers necessary to operate Nova:

ProviderPurposeRegion
Supabase Inc.Database, authentication, edge functionsUK (eu-west-2)
Oracle CloudPrimary sovereign AI inference — Qwen 2.5 7B via vLLM on private GPU (A10G). Data never leaves Nova's isolated container.USA (Oracle Cloud Infrastructure)
Groq Inc.Tertiary AI fallback inference — Llama 3.3 70B. Used only when primary/secondary are unavailable.USA
Together AIEmergency AI fallback inference — used only if all other layers are down.USA
OpenAI Inc.Whisper transcription for audio messages only — API tier, no model training on your data. Being phased out as sovereign audio transcription is built.USA
TikTok Inc.Content Posting API, Comment API, DM API, Login KitUSA / Singapore
Meta Platforms Inc.WhatsApp Business API, Instagram Graph API, Facebook Messenger APIUSA / Global
AnchorNova Pay virtual bank accounts (Nigeria)Nigeria
FincraNova Pay multi-currency virtual accounts (NGN, USD, GBP, EUR, GHS)Nigeria / Global
Stripe Inc.Subscription billing & international paymentsUSA
Resend Inc.Transactional email (OTP, invoices, alerts)USA
Law enforcement / judicial bodiesDisclosure only where required by applicable law or valid legal processJurisdiction-dependent

7. Data Retention

  • Active business accounts: Duration of the account plus 2 years
  • Nova conversation history: Retained while the account is active; deleted within 90 days of account termination
  • TikTok and Meta platform data: Deleted within 90 days of disconnecting the integration or account termination
  • Nova Pay transaction records: 7 years, as required for financial record-keeping
  • Analytics data: 24 months, then anonymised or deleted
  • Security logs and OTP records: 90 days

You may request deletion of your data at any time by contacting info@neontechhq.com. We action all valid requests within 30 days, subject to legal retention obligations.

8. Your Rights

Depending on your location and applicable law, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Receive your data in a portable, machine-readable format
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority — in Nigeria: the Nigeria Data Protection Bureau (NDPB); in the EU: your national data protection authority; in the UK: the Information Commissioner's Office (ICO)

To exercise any right, contact us at info@neontechhq.com.

9. Cookies and Tracking

  • Essential cookies: Required for login sessions and security. Cannot be disabled.
  • Analytics cookies: Track page views and usage patterns. Only set with your explicit consent.
  • Preference cookies: Remember your settings.

You are shown a cookie consent notice on first visit. Declining disables all non-essential cookies. You may change your preference at any time by clearing browser storage.

10. Security

We implement TLS encryption in transit, row-level security on all database tables, multi-factor authentication for administrative access, OTP-based login for all portal users, cryptographic webhook signature verification (HMAC-SHA256 for Meta; TikTok signature validation for TikTok webhooks), and device fingerprinting for fraud detection. All OAuth tokens and API credentials are stored encrypted at rest.

11. Children

Nova is intended exclusively for business operators and individuals capable of forming legally binding contracts. Nova does not knowingly collect personal information from anyone under the age of 13. If you believe such data has been collected, contact us immediately at info@neontechhq.com.

12. International Data Transfers

Your data may be transferred to and processed in countries outside your own, including the United Kingdom (Supabase, eu-west-2) and the United States (Oracle Cloud, Groq, Together AI, Stripe, Resend, TikTok, Meta). We secure cross-border transfers using Standard Contractual Clauses (SCCs) or equivalent mechanisms as required by applicable law.

13. Changes to This Policy

For material changes to this policy, we will provide at least 14 days' advance notice by email or prominent website notice. Your continued use after the notice period constitutes acceptance. Non-material changes take effect immediately upon posting with a revised "Last Updated" date.

14. Contact

For privacy questions, data requests, or complaints:

Neon Quantum Systems Ltd. (trading as Nova / Neon Tech)
Email: info@neontechhq.com
Website: nova.neontechhq.com
Company website: neontechhq.com

Terms of ServiceBack to Nova
© 2026 Neon Quantum Systems Ltd.