This Privacy Policy describes how Anakatech LLC (“we”) handles information when you use Nova X on the web or in a store-listed Nova X app. Nova X is the spot desk, OTC settlement, and member wallets on Nova Bank. It is not the self-custody Nova Plus Wallet. We do not take possession of recovery phrases or private keys.

1. Data we do not collect

• Recovery phrases (12/24 words), private keys, or keystore passwords
• Screenshots or copies of a wallet backup
• Full card PAN/CVV from Nova X (card checkout is not live on this desk)
• A persistent device identifier from the Nova X desk itself. The Nova X desk itself does not create or send a device ID, except as described in section 2 for the optional Nova Bank sign-in.

2. Data that may be processed

• Optional Nova Bank sign-in: Nova X uses your Nova Bank email and PIN (JWT), not a recovery phrase. When you use Nova Bank sign-in within the app, the Nova Bank web app may store a device identifier (nova_device_id) on your device and send it to Nova Bank servers to keep your session in sync. This is used only to operate the bank features, not for advertising or tracking. Bank account data is covered by the Nova Bank Online privacy notice.
• On your device: UI preferences and the signed-in session token stored locally in this browser or app.
• Trading and wallets: orders, fills, balances, and deposit/withdrawal requests on the Nova Bank ledger. Empty books stay empty — Nova does not invent balances or mint stables to display a quote.
• OTC: the OTC contract is a settlement instruction path. It never holds funds.
• Network: when the desk talks to a hosted book, RPC, or swap route, that endpoint can see your IP address and the public payload of the request.
• Support email: if you write to us, we receive the address and message you send. Do not include a recovery phrase.

3. How we use information

• To operate Nova X (markets, spot, OTC, buy-crypto, member wallets, orders)
• To keep your Nova Bank session in sync
• To diagnose outages when you contact support
• To comply with law if we are legally required to respond to a valid request about our own systems

We do not sell personal data. We do not use your recovery phrase for advertising.

4. Third parties

Depending on features you use, requests may go to:

• Nova Bank API hosts on nova-x.io (the same Hostinger production stack as the bank)
• Hosted book / Marionette quotes when a live, non-synthetic quote exists
• Public-chain RPC providers when you deposit or withdraw on a chain you selected
• Swap or bridge routes you explicitly use (including third-party aggregators on public EVM)
• Cloudflare, which hosts and protects nova-x.io, including aggregated usage and performance statistics (Cloudflare Web Analytics). Your browser or app also loads fonts from Google Fonts, which can see your IP address.

Those parties have their own terms. Nova X paths on nova-x.io are Nova-owned adapters on the same books — they are not those companies holding your funds. We do not control how a public blockchain stores transactions.

5. Children

Nova X is not directed at children under 18 (or the age of majority in your jurisdiction).

6. Retention

Session tokens remain on the device until you sign out or clear site data. Ledger records are kept as long as needed to operate the account and meet record-keeping duties. Support emails are kept only as long as needed to resolve the request and meet those duties.

7. Your choices

• Do not enable networks or trading features you do not want to use
• Sign out or clear local storage to remove the on-device session
• Request access or deletion of support-email records by contacting us

8. International processing

Infrastructure may run in more than one region. Public-chain data is global by design.

9. Contact

Privacy and support: [email protected]
Legal: [email protected]
Privacy mailbox: [email protected]

See also Terms of Use and Support. Nova Plus Wallet has its own wallet privacy policy.