Privacy Policy

Supernova (“Supernova”, “we”, “our”, or “us”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, store, and share personal information when you visit our website, contact us, engage our services, or otherwise interact with Supernova.

It applies to information collected through our website, project enquiries, client engagements, and related business activities.

1. Information we collect

We may collect different types of information depending on how you interact with us.

Information you provide directly

When you contact us, submit a project enquiry, engage our services, or communicate with our team, you may provide information such as:

• name

• work email address

• phone number

• company name

• job title

• project information

• product requirements

• budget or investment range

• expected project timeline

• information contained in messages, documents, or files you send to us

Where necessary for commercial engagements, we may also collect billing, invoicing, contractual, and business information.

Payment information may be processed by third-party payment providers rather than stored directly by Supernova.

Website and usage information

When you use our website, certain information may be collected automatically, including:

• IP address

• browser type

• device type

• operating system

• referring pages

• pages visited

• time spent on the website

• interactions with website content

• approximate geographic information derived from technical data

We may collect this information using cookies, analytics tools, server logs, and similar technologies.

Information provided during client projects

When providing product, design, engineering, AI, cloud, data, or consulting services, clients may provide us with information required to complete the engagement.

This may include:

• business information

• product data

• customer research

• technical documentation

• analytics

• system information

• API credentials

• project files

• datasets

• user feedback

• internal processes

• other information relevant to the project

How this information is handled may also be governed by the applicable proposal, Statement of Work, confidentiality agreement, Data Processing Agreement, or other contract between Supernova and the client.

2. How we use information

We may use information we collect to:

• respond to enquiries

• assess potential projects

• prepare proposals and agreements

• provide our services

• communicate with clients and prospective clients

• manage projects and client relationships

• provide support

• process invoices and payments

• improve our website, services, and delivery processes

• understand how visitors use our website

• maintain the security and reliability of our systems

• prevent fraud or misuse

• maintain business and financial records

• comply with legal and regulatory obligations

• establish, exercise, or defend legal claims

Where permitted, we may also use contact information to communicate relevant Supernova updates, services, insights, or business information.

You can opt out of marketing communications at any time.

3. AI-assisted tools and services

Supernova uses artificial intelligence tools as part of some research, design, engineering, development, testing, analysis, and delivery workflows.

Where AI tools are used, we take reasonable steps to ensure that client and personal information is handled appropriately based on the nature and sensitivity of the data involved.

We do not intentionally provide confidential or sensitive client information to public AI systems in a manner inconsistent with our contractual obligations.

Where a project requires specific restrictions around AI processing, model providers, data residency, retention, or training use, those requirements should be identified and agreed as part of the engagement.

Where Supernova builds AI-enabled products for clients, the handling of end-user information may also depend on the architecture, third-party providers, and privacy requirements agreed for that product.

4. How we share information

We do not sell personal information.

We may share information with third parties where reasonably necessary to operate our business or provide our services.

These may include:

• cloud and hosting providers

• analytics providers

• communications platforms

• project-management systems

• CRM platforms

• payment and invoicing providers

• professional advisers

• software and infrastructure providers

• AI and model providers where appropriate

• subcontractors or specialist partners involved in delivering an engagement

We may also disclose information where required to:

• comply with applicable law

• respond to lawful requests from authorities

• protect our legal rights

• investigate suspected fraud, abuse, or security incidents

• protect the rights, property, or safety of Supernova, our clients, users, or others

Where appropriate, service providers are expected to process information only for the purposes for which it has been provided.

5. Third-party platforms

Our website and services may rely on or integrate with third-party platforms such as cloud providers, analytics services, payment providers, development tools, AI providers, APIs, and other software services.

These providers may process personal information according to their own privacy policies and contractual terms.

Depending on the project, these providers may include services such as AWS, Vercel, Supabase, Stripe, OpenAI, Anthropic, Google, GitHub, and other technology providers.

The exact services used may vary between projects.

6. Cookies and analytics

We may use cookies and similar technologies to:

• operate the website

• remember preferences

• understand website traffic

• measure engagement

• improve website performance

• understand how visitors find and use our services

Some cookies may be necessary for the website to function. Others may be used for analytics or marketing where permitted.

Where required by applicable law, we will request consent before placing non-essential cookies.

You may also control cookies through your browser settings or any cookie controls made available on our website.

7. Data security

We use reasonable technical and organisational measures designed to protect information against:

• unauthorised access

• accidental loss

• misuse

• alteration

• disclosure

• destruction

Depending on the nature of the information and project, these measures may include access controls, encryption, authentication, secure infrastructure, restricted permissions, monitoring, and other security practices.

However, no internet transmission, software system, cloud environment, or method of electronic storage can be guaranteed to be completely secure.

8. Data retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods may depend on:

• the nature of our relationship with you

• the duration of a client engagement

• contractual requirements

• legal and regulatory obligations

• financial and accounting requirements

• security requirements

• dispute-resolution needs

Project information may be retained for an appropriate period after an engagement to support maintenance, legal obligations, project records, or future work unless otherwise agreed.

9. International data transfers

Supernova may work with clients, team members, infrastructure providers, and technology services located in different countries.

As a result, personal information may be processed outside the country in which it was originally collected.

Where required by applicable law, we take reasonable steps to ensure appropriate safeguards are used when personal information is transferred internationally.

10. Your privacy rights

Depending on where you are located, you may have rights relating to your personal information.

These may include the right to:

• request access to your personal information

• request correction of inaccurate information

• request deletion of certain information

• restrict certain processing

• object to certain processing

• withdraw consent where processing is based on consent

• request a portable copy of certain information

• opt out of direct marketing

• lodge a complaint with an applicable data-protection authority

These rights may be subject to legal limitations and exemptions.

To exercise a privacy right, contact us using the details below.

We may need to verify your identity before processing certain requests.

11. Marketing communications

Where permitted by law, we may send business or marketing communications relating to Supernova services, insights, or updates.

You can unsubscribe from these communications at any time using the unsubscribe option provided or by contacting us directly.

Transactional and project-related communications may still be sent where necessary to provide services or manage an existing relationship.

12. Client data and data processing

For certain client engagements, Supernova may process personal information on behalf of a client.

In these situations, the client may act as the data controller or equivalent responsible party and Supernova may act as a processor or service provider.

Where appropriate, the parties may enter into a separate Data Processing Agreement defining:

• processing instructions

• security requirements

• subprocessors

• international transfers

• retention

• deletion

• data-subject requests

• incident management

Clients are responsible for ensuring that they have the appropriate legal basis and permissions to provide personal information to Supernova for processing.

13. Sensitive information

Please do not provide sensitive personal information unless it is necessary for the engagement and has been specifically agreed with us.

Where a project requires processing of sensitive or regulated information, additional contractual, security, or compliance requirements may apply.

14. Children’s privacy

Our website and services are primarily intended for businesses, founders, professionals, and organisations.

We do not knowingly collect personal information directly from children where doing so would require parental or guardian consent under applicable law.

If you believe a child has provided us with personal information improperly, please contact us.

15. Third-party websites

Our website may contain links to websites or services operated by third parties.

Supernova is not responsible for the privacy practices, content, or security of those third-party websites.

We encourage you to review their privacy policies before providing personal information.

16. Business transfers

If Supernova is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, personal information may be transferred as part of that transaction where permitted by law.

Any receiving organisation would be expected to handle that information consistently with applicable privacy obligations.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, business practices, technology, or legal requirements.

When we make changes, we will update the Last updated date at the top of this page.

Where legally required, we may provide additional notice of material changes.

18. Contact us

If you have questions about this Privacy Policy or want to exercise a privacy right, contact:

Supernova
📧 Email: talk@supernovalabz.com
🌐 Website: Supernovalabz