Privacy Policy

Nova ("Nova", "the bot", "we") is an AI blockchain and community assistant operated by Zero Authority DAO — covering Bitcoin, Stacks, Ordinals, 60+ EVM chains, and Solana, alongside community engagement features for the servers and groups it serves. Nova is available on Discord, Telegram, and as an embeddable web widget. This policy explains what data Nova collects, how it is used, and the choices you have.

Data We Collect

Nova does not collect presence/online status or voice data. It does not read messages that are not directed at it, except in a community whose admins turned on one of the community features above (and for the ZADAO community stats described below). It never reads your DMs with other people.

How Long We Keep It

• Conversation memory is tiered and expires automatically: recent context is kept for ~6 hours, extended context for ~48 hours, and compressed conversation summaries for up to 30 days. After that it is deleted.
• Community features (only where a community's admins turned them on):
  • Guardian and Language Moderation check each message as it is posted and do not keep it. A message that is flagged is the exception: up to 1,000 characters of it, with its author's ID and name, are kept as a moderation record for that community's moderators for up to 180 days, then deleted automatically (or sooner on request).
  • Pulse keeps recent messages (text and username) for up to 72 hours to find unanswered questions and write the moderators' daily brief, and join events for up to 30 days.
  • Relay keeps messages from public channels only (the ones every member of the community can already see) for as long as the period the recap covers plus 6 hours: up to 30 hours by default, and up to 7 days and 6 hours when the community's admins choose a 48-hour or 7-day recap. They are kept without usernames, only to write the recap. Private and staff channels are never read. The buffer is deleted at once when Relay is turned off (a live recap message is taken down too), and a message deleted in the chat is removed from it. The recaps themselves, which name nobody, are kept for up to 90 days.
  • Warp copies a message of the linked Discord channel or Telegram group to the community's other platform as it is posted, with the author's display name. A Telegram member's copies on Discord also show their Telegram profile photo: Nova reads it from Telegram when Discord asks for it and keeps it in memory for a few hours, never in the database; members who hide their photo get a plain avatar. A Discord member's copies on Telegram show an emoji picked for them in that server: Nova keeps which emoji belongs to which Discord member (ids only) and removes it after 90 days without a message. It stores no message text and no names: only which message became which copy, for up to 48 hours, so that an edit or a deletion follows it. The text of recent copies is held in memory for about an hour for the same reason, and never written to the database. A copy stays on the other platform like any message there, and is deleted when its original is deleted. If you asked Nova not to copy your messages, that choice is kept until you change it or delete your data.
  • Community Games keeps XP, levels and message counts per member, with no message text, while the feature is in use. The list of who entered a giveaway is deleted 90 days after it closes, and the giveaway with its winners after one year.
  • Community Roles keeps, per Discord server, the wallets you verified there, the roles Nova gave you, and the date it first saw your wallet hold what a role asks for (used to count how long you have held it). The date you joined the server is read from Discord when your roles are checked and is not stored. All of it is deleted when you leave the server or delete your data.
  • Knowledge base: what a community's admins add to it, including a question and the moderator's answer that resolved it, is kept until an admin removes the entry.
  • Community Settings dashboard: a log of which team member changed which setting is kept for up to two years.
  • Harbor keeps join and leave dates and the time of a newcomer's first message for about 180 days.
• Usage allowance: how much of your AI allowance you have used is kept as a running total per 15 minutes, linked to your account and with no message content, and deleted after 8 days.
• Nova Chat (web app) keeps the full transcript of each of your threads so you can reopen it, until you delete the thread.
• ZADAO community stats: message metadata (author ID, timestamp, length — no text) is kept up to 365 days to compute weekly engagement stats. Message text in the ZADAO community is stored transiently for up to 14 days to power quality-based contribution scoring, then permanently deleted; only content-free scores and counts are kept.
• Alert subscriptions and registered wallet addresses are kept until you remove them or stop using Nova.
• Account records (user ID, premium status) are kept while you use Nova.
• Payment and security records (community plan payments, and the log of wallet operations made by the Nova team) are kept as long as accounting and security require, the latter for up to two years.

Where Data Is Stored

Data is stored in a PostgreSQL database hosted on Amazon Web Services (AWS), encrypted in transit and at rest, with access restricted to the Nova operations team.

Third Parties

• Anthropic (Claude API) — messages you send to Nova are processed by Anthropic's Claude models to generate responses. Where a community feature is on, messages posted in that community may also be processed by Claude to run it (for example to classify a suspected scam or to write the daily recap, which is sent without usernames). This is inference only: per Anthropic's commercial API terms, this data is not used to train AI models.
• Blockchain data providers (e.g. Hiro, mempool.space, market data APIs) — Nova queries these for on-chain and market data. Your personal data is not shared with them; only the addresses/tokens you ask about are queried.
• AWS — infrastructure hosting, as described above.
• Discord and Telegram — Nova receives your messages and profile data through their APIs and delivers its responses back through them. Where a community turned on Warp, a message posted in its linked chat is also delivered, with your display name, to the community's chat on the other platform. The platforms process your data independently under their own privacy policies (Discord, Telegram).

We do not sell, rent, license, or share your personal data with advertisers, data brokers, or any other monetization service. Ever. We disclose personal data only to the service providers above, when required by law, or when you expressly direct us to.

AI and Machine Learning

Nova uses large language models (Anthropic Claude) to understand and answer your messages, and to run the community features a community's admins turned on. Your message content is used only for inference (generating the response, the moderation verdict or the recap). Neither we nor our model provider use your messages to train or fine-tune machine learning models.

Your Choices

• Don't want Nova reading your messages? Don't DM, @mention, or reply to it. Nova ignores all other messages, unless the admins of the server or group you are in turned on a community feature: ask them which ones are on.
• Community features: admins can turn any of them off at any time, and can leave channels out of the Relay recap. To keep your own messages from being copied to a community's other platform by Warp, tell Nova "don't warp my messages" (anywhere, DMs included). You can ask the community's admins or our team to delete what a feature stored about you.
• Community stats (ZADAO server only): server admins can exclude channels from tracking, and you can ask a ZADAO admin or our team to exclude your account or delete your activity data.
• Delete your data yourself, at any time: tell Nova "delete my data" on Discord or Telegram (in a DM, or by mentioning it). Nova shows what will be deleted and asks you to type a confirmation phrase; once you do, it deletes your conversations and its memory of you, your alerts and trackers, your XP and activity records in every community, your verified wallets and your account with every identity linked to it. This is immediate and cannot be undone. Two things are kept: payment records, which we must keep for accounting and which are no longer linked to an identity, and content a community published as its own (for example a knowledge base entry), with your ID removed from it. Discord roles Nova gave you for tokens you hold are removed as part of it. If you own a community on Nova, hand it over or delete it first.
• Get a copy of your data: sign in at nova.zeroauthoritydao.com with the same Discord, Telegram, Google or wallet identity, open the Dashboard and use Your data > Download a copy. You get a file with everything stored about your account and the identities linked to it. The same card has Delete my data.
• Delete a community's data: the owner of a community can delete everything Nova stores for it (every feature's settings and records in its server and group, and the community itself) from the Community Settings dashboard, under Delete community data.
• Correct your data, or ask us to do any of this for you: ask in the ZADAO Discord (discord.gg/zeroauthority) or contact the team.
• Remove Nova: server admins can remove the bot at any time; per-server data is no longer collected from that point, and previously stored data expires per the retention schedule above. To remove it at once, the community's owner uses Delete community data before removing the bot.

Your Rights

Depending on where you live (e.g. GDPR, UK GDPR, CCPA/CPRA, LGPD), you may have the right to access the personal data we hold about you, have it corrected, have it deleted, object to or restrict its processing, and receive a copy of it. Access, a copy and deletion are built in: see "Your Choices" above. To exercise any other right, contact us through the channels below — we honor these requests for all users regardless of location, and we will never discriminate against you for exercising them. We also delete API data when it is no longer needed for Nova's stated functionality, when Nova is removed from a server, or when Discord or you request it, in line with the Discord Developer Terms of Service.

Security & Breach Notification

Data is encrypted in transit and at rest, and access is restricted to the Nova operations team. If a security incident results in unauthorized access to your personal data, we will notify affected users and the relevant platforms/authorities as required by applicable law.

Children

Nova is not directed at children under 13 (or the minimum age required by Discord/Telegram in your country), and we do not knowingly collect data from them.

Changes

We will update this page when our data practices change and update the "Last updated" date above.

Contact

Questions or data requests: reach the team in the ZADAO Discord or via zeroauthoritydao.com.