Legal
Last updated: September 2026
Nova SMS Studio is a bulk messaging console operated in Accra, Ghana. We process personal data in line with Ghana's Data Protection Act, 2012 (Act 843).
Account data: your name, email address, password (stored hashed by our auth provider — we never see it), role and credit balance.
Messaging data: the contacts you upload (names, phone numbers, groups), message content, sender IDs, delivery reports and billing records. This data belongs to you.
Technical data: sign-in history, audit events of admin actions, and basic device/browser information for security.
To operate your account, route and deliver messages, bill correctly, prevent fraud and abuse, and provide support. We do not sell personal data, and we never use your contacts for our own marketing.
Gateway providers (to deliver SMS), payment processors (to collect top-ups), and infrastructure hosts (database, hosting). Each receives only what it needs. We disclose data to authorities only when legally required.
You may access, correct, export or delete your data at any time: edit your profile in-app, export contacts and history as CSV, or ask us to delete your account and all associated data. Deletion is permanent and also removes backups within 30 days.
If you message other people through Nova, you are their data controller for consent. You must have a lawful basis (such as consent) and honor opt-outs immediately. We act as your processor for that traffic.
Passwords are hashed, traffic is encrypted in transit, databases enforce row-level access controls, API secrets are stored as hashes, and every admin action is audit-logged. No system is perfect — report suspected breaches to us promptly.
Message content and delivery records are kept while your account is active and for 12 months after closure for billing disputes, then deleted. Audit logs are kept for 24 months for platform security.
Questions about privacy: write to us through the Support page in your console and we will respond within 72 hours.