Privacy Policy

Last Updated: March 23, 2026

This Privacy Policy explains how NOVAVPN LLC, operating NovaVPN ("we," "us," or "our"), collects, uses, shares, and protects information when you use our mobile application, website, and related services (collectively, the "Service").

NovaVPN is a VPN service that may offer both free and premium access plans. The free version of the Service may display advertising. Premium features may be offered through paid subscriptions or other authorized purchase methods.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

• Controller / Provider: NOVAVPN LLC
• Registered Address: USA
• Contact Email: novavpnbusiness@gmail.com
• Website: novavpn.tech

If local law requires a specific legal representative, data protection contact, or EU/UK representative, their details should be listed here.

2. Scope of This Policy

This Privacy Policy applies to:

• our mobile application(s);
• our website and related web pages;
• customer support communications;
• subscription, payment, and account management activities related to the Service.

This Privacy Policy does not apply to third-party services that have their own privacy policies, including app stores, payment processors, advertising providers, analytics vendors, and third-party websites linked from the Service.

3. Information We Collect

We collect only the information reasonably necessary to operate, secure, support, and improve the Service, comply with law, and manage subscriptions and advertising.

3.1 Information You Provide Directly

We may collect information you provide to us, such as:

• your email address, if you contact us or create an account;
• support requests, feedback, bug reports, or other communications;
• any information you choose to provide in support messages or contact forms.

3.2 Subscription and Transaction Information

If you purchase a premium plan or other paid feature, we may receive limited transaction-related information, such as:

• subscription status;
• product identifier / plan type;
• transaction or purchase token / receipt identifier;
• purchase, renewal, expiration, cancellation, refund, or billing status;
• country, currency, or storefront information where made available by the platform.

We do not collect or store your full payment card number or full financial account details when purchases are processed by app stores or authorized payment providers.

3.3 Advertising-Related Information

If you use the free version of the Service or otherwise view ads, our advertising partners may collect or receive information such as:

• device identifiers, including advertising identifiers where available;
• IP address;
• app interactions and ad engagement data;
• device, network, and app information;
• crash, diagnostics, and performance data;
• approximate location inferred from IP address or device settings, where permitted.

This information may be used to deliver ads, measure ad performance, prevent fraud, and, where permitted by law and your settings, personalize advertising.

3.4 Device, App, and Diagnostics Information

We may collect limited technical information needed to provide and maintain the Service, including:

• app version;
• operating system version;
• device model;
• language and region settings;
• crash logs and diagnostics;
• performance metrics;
• installation identifiers or internal app instance identifiers;
• information needed to troubleshoot errors and maintain service stability.

3.5 VPN Operational Data

To operate the VPN service, we may process limited technical or operational data, such as:

• selected server or server region;
• connection attempt status (for example, success/failure);
• connection timestamps or session events in a limited form, if required for operation, abuse prevention, troubleshooting, service limits, or subscription enforcement;
• aggregate bandwidth consumption or usage counters;
• anti-abuse, anti-fraud, and service integrity signals.

We design our systems to minimize the amount of VPN-related information collected and retained.

4. What We Do Not Collect or Log

We do not log, monitor, or store:

• your browsing history;
• the content of your communications;
• DNS queries associated with your browsing activity, except as strictly necessary for the technical operation of the Service and not retained as activity logs;
• destination IP addresses or websites you visit through the VPN tunnel;
• the contents of data transmitted through the VPN connection.

If temporary processing is technically required to establish or maintain a connection, such processing is limited to what is necessary for real-time delivery of the Service and is not used to build browsing profiles.

5. How We Use Information

We may use information for the following purposes:

• to provide, operate, secure, and maintain the Service;
• to authenticate purchases, validate subscriptions, restore entitlements, and manage premium access;
• to show advertising in the free version of the Service;
• to measure ad performance and prevent invalid traffic, fraud, abuse, and misuse;
• to troubleshoot, debug, and improve app performance and reliability;
• to respond to support requests and communicate with users;
• to monitor service capacity, availability, and infrastructure health;
• to enforce our Terms of Service and other policies;
• to comply with legal obligations and lawful requests from authorities;
• to protect our rights, users, systems, and business operations.

6. Legal Bases for Processing

Where applicable under the GDPR, UK GDPR, or similar laws, we process personal data on one or more of the following legal bases:

• performance of a contract: to provide the Service you requested;
• legitimate interests: to secure, maintain, improve, support, and monetize the Service, including ad-supported access and fraud prevention;
• consent: where required, including for certain advertising, tracking, or privacy-choice mechanisms;
• legal obligation: where processing is necessary to comply with applicable law.

7. Advertising and AdMob

The Service may include advertising, including through Google AdMob and related advertising partners, especially in the free version of the Service.

Where required by applicable law, we will request consent before using personal data for personalized advertising or before enabling tracking technologies that require consent. You may also have the right to withdraw or update your advertising privacy choices at any time through your device settings, in-app privacy settings, or applicable consent tools.

Even if you decline personalized advertising, you may still see non-personalized ads.

8. Payments, Premium Plans, and Subscriptions

Premium access may be offered through auto-renewing or recurring subscriptions, one-time purchases, or other authorized billing methods.

If you purchase through Apple App Store, Google Play, or another marketplace:

• the relevant store or payment provider processes the transaction;
• we may receive only limited purchase metadata needed to verify and manage your entitlement;
• billing, renewal, cancellation, refund, and payment method management may be handled by the relevant store or provider under their own terms and privacy policies.

If local law or platform rules require additional billing disclosures, those disclosures will be provided in the app store listing, checkout flow, or in-app purchase screen.

9. How We Share Information

We do not sell your personal data for money. We may share limited information in the following situations:

9.1 Service Providers and Processors

We may share information with vendors that help us operate the Service, such as:

• cloud hosting and infrastructure providers;
• customer support tools;
• crash reporting and diagnostics providers;
• analytics or performance monitoring providers;
• advertising and monetization partners;
• payment or subscription verification providers.

These providers are authorized to process information only as needed to provide services to us, subject to contractual, technical, or legal safeguards.

9.2 App Stores and Payment Platforms

Where premium features are sold through app stores or marketplaces, those platforms may process personal and transaction data under their own privacy policies.

9.3 Legal Compliance and Protection

We may disclose information if we believe in good faith that disclosure is necessary to:

• comply with law, regulation, court order, or lawful request;
• investigate fraud, abuse, or security incidents;
• protect the rights, property, or safety of our users, business, or systems.

9.4 Business Transfers

If we are involved in a merger, acquisition, financing, restructuring, asset sale, or similar transaction, information may be disclosed as part of that process subject to appropriate confidentiality and legal protections.

10. International Data Transfers

Your information may be processed in countries other than the country where you live. Those countries may have different data protection laws.

Where required by law, we use appropriate safeguards for cross-border transfers, such as contractual protections, vendor commitments, internal access controls, and other legally recognized transfer mechanisms.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide the Service;
• maintain subscriptions and purchase entitlements;
• comply with tax, accounting, legal, and regulatory obligations;
• detect and prevent fraud and abuse;
• resolve disputes and enforce agreements.

Retention periods may vary depending on the data type, how the Service is used, and legal requirements. When data is no longer needed, we delete it, anonymize it, or securely isolate it where deletion is not immediately feasible.

12. Data Security

We implement reasonable technical, organizational, and administrative safeguards designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures may include:

• encryption in transit;
• access controls and least-privilege access;
• secure infrastructure and monitoring;
• logging and incident response measures for platform security;
• vendor due diligence where appropriate.

No method of transmission, storage, or security control is completely infallible, and we cannot guarantee absolute security.

13. Your Rights and Choices

Depending on your location, you may have the right to:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• request portability of certain data, where applicable;
• lodge a complaint with a competent data protection authority.

You may also have choices regarding:

• ad personalization and tracking;
• device advertising identifiers;
• push notifications;
• subscription cancellation and renewal settings through the relevant app store;
• account deletion, if an account feature is offered.

To exercise applicable rights, contact us at novavpnbusiness@gmail.com. We may need to verify your identity before fulfilling certain requests.

14. California and Similar U.S. Privacy Rights

If you are a resident of California or another U.S. state with applicable privacy law, you may have additional rights regarding access, deletion, correction, portability, and opt-out choices.

We do not sell personal information for monetary consideration. If applicable law treats certain advertising-related disclosures as "sharing" or targeted advertising, you may have the right to opt out of that processing through available privacy settings, consent tools, or by contacting us.

15. Children's Privacy

The Service is not directed to children under the minimum age required under applicable law, and in no event to children under 13 years of age.

We do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided personal data to us, contact us and we will take appropriate steps to investigate and, where required, delete the information.

16. Third-Party Services

Our Service may integrate with or link to third-party services, including:

• Google AdMob and related ad technology providers;
• Apple App Store, Google Play, and related billing/subscription systems;
• analytics, diagnostics, and infrastructure providers.

Those third parties may process data under their own privacy policies. We encourage you to review those policies separately.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, technology, legal requirements, or business practices.

When we make material changes, we will update the "Last Updated" date and, where required, provide additional notice in the app, on our website, or through other appropriate means.

18. Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact us:

• NOVAVPN LLC
• novavpnbusiness@gmail.com
• novavpn.tech