Privacy Policy

Last updated: 2026-04-20 · Part of the NOVA empire

1. Who We Are

Shadow Operator ("we", "us", "our") is an AI-powered service operated as part of the NOVA empire under the UVZ Funnel Forge framework. This Privacy Policy explains what data we collect, why we collect it, and how we protect it.

2. Information We Collect

Information you provide

Account data: email, name, password hash.
Payment data: processed by Stripe/Whop; we never store full card numbers.
Content you submit: prompts, uploads, generated outputs, chat messages.

Information collected automatically

Usage data: pages viewed, features used, interaction timestamps.
Device & log data: IP address, browser, OS, referrer, error logs.
Cookies and similar tech for authentication and analytics.

3. How We Use Your Data

Deliver and improve the Service.
Process payments and subscriptions.
Provide customer support.
Send transactional and (with consent) marketing emails.
Detect and prevent fraud or abuse.
Train and fine-tune AI models that power the Service, using anonymized/aggregated data only. We do not sell your personal data to third parties.

4. AI Processing & Third-Party Providers

Prompts and user inputs are sent to third-party AI providers (such as OpenAI, Anthropic, or equivalents via Laozhang AI gateway) to generate responses. Those providers have their own privacy policies. Payments are processed by Stripe and/or Whop. Hosting is on Cloudflare Workers/Pages.

5. Data Retention

We retain account data for as long as your account is active. You can request deletion at any time by emailing support. Generated outputs and chat history are retained for product quality and support unless you delete them.

6. Your Rights (GDPR / CCPA)

You have the right to: access your data, correct it, delete it, export it, restrict processing, and object to processing. EU/UK users can file complaints with their Data Protection Authority.

7. Security

We use HTTPS everywhere, encrypted secrets on Cloudflare, hashed passwords, and principle-of-least-privilege access. No system is 100% secure — we cannot guarantee absolute security.

8. Children

The Service is not intended for users under 16. We do not knowingly collect data from children.

9. Cookies

We use strictly necessary cookies (auth, security) by default, and optional analytics cookies with your consent.

10. Contact

Questions about privacy or to exercise your rights: contact us.