Privacy Policy
LAST UPDATED 30 APRIL 2026
NOVA Labs ("NOVA", "we", "us") provides due-diligence and monitoring services on companies in emerging markets, using documents those companies have filed with government authorities. This policy explains what personal information we collect from visitors and customers, why we hold it, and the choices you have.
1. Information we collect
Information you give us. When you request a free check, contact us or become a customer, we collect your name, work email address, telephone number where provided, the company you work for, the supplier names you ask us to look at, and anything you write in a message.
Information collected automatically. Our website records basic technical data such as IP address, browser and device type, referring page and pages viewed, for security and aggregate analytics.
Public records. Our service analyses documents that companies have filed with government authorities and other lawfully public sources. Those records may name individuals — for example directors, officers or auditors — in their professional capacity. We do not collect personal data from your suppliers, and we never contact them.
2. How we use it
To run the checks you ask for and deliver the results; to reply to you and provide support; to operate, secure and improve our platform; to send service and product updates you can unsubscribe from at any time; and to meet our legal and accounting obligations.
We do not sell personal information, and we do not use the contents of your requests to advertise to you.
3. Legal bases
Where the GDPR or UK GDPR applies, we rely on performance of a contract (delivering the service you requested), legitimate interests (operating and securing the platform, business communications with professional contacts), consent where required for marketing, and legal obligation where the law requires retention. Where India's Digital Personal Data Protection Act, 2023 applies, we process personal data for the specified purposes above on the basis of your consent or a legitimate use permitted under that Act.
4. Sharing
We share personal information only with service providers who help us operate — cloud hosting, email delivery, analytics, customer support and payment processing — under contracts that restrict them to our instructions. We may disclose information where required by law, to protect our rights, or in connection with a corporate transaction, in which case this policy will continue to apply to the information transferred.
5. International transfers
We operate from India and serve customers internationally, so your information may be processed outside your country. Where required, we use appropriate safeguards such as the European Commission's standard contractual clauses. Data residency arrangements are available to enterprise customers on request.
6. Retention
We keep enquiry details for up to 24 months from our last contact with you, customer account records for the life of the account and for as long afterwards as tax and contract law requires, and technical logs for up to 12 months. Public filings and the findings derived from them are retained as part of the audit trail our customers rely on.
7. Security
We use encryption in transit and at rest, role-based access control, least-privilege internal access and logged administrative activity. A SOC 2 Type II programme is in progress. No system is completely secure, and we will notify affected parties and regulators of a qualifying breach as the law requires.
8. Cookies
We use only the cookies needed to run the site and understand aggregate traffic. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser; essential functions may then behave differently.
9. Your rights
Subject to your local law, you may request access to the personal information we hold about you, correction of inaccurate information, deletion, restriction of or objection to certain processing, a portable copy, and withdrawal of consent. You may also nominate someone to exercise these rights on your behalf where the DPDP Act allows. Write to team@nova-labs.in and we will respond within the statutory period. If you are unsatisfied you may complain to your data protection authority, or to the Data Protection Board of India.
If you believe a public record we have analysed describes you inaccurately, note that we reproduce what was filed and cite its source. We will record your correction alongside the finding and, where the source is amended, reflect the amendment.
10. Children
Our services are for business use and are not directed to children. We do not knowingly collect their personal information.
11. Changes
We will post any update on this page and change the date above. Material changes will be notified to customers by email.
12. Contact
NOVA Labs · team@nova-labs.in