Privacy policy

Nova PR is a media-placement marketplace operated by NovaReach ("NovaReach", "we", "us"). NovaReach is the controller of the personal data described in this policy. You can reach us at any time through our contact form.

We collect only what we need to run the marketplace:

• Account data — name, email address, username, password (stored only as a one-way hash), country, account type, and, if you use Google sign-in, your Google account identifier.
• Profile and billing data — phone number, billing name, company, address, VAT number and your PayPal email for payouts, where you provide them.
• Transaction data — deposits, orders, escrow movements, invoices, withdrawals and affiliate commissions. Card and wallet payments are handled by our payment processors; we do not store full card numbers.
• Order content — briefs, articles, URLs, anchors and messages exchanged with publishers or the Nova PR desk.
• Publisher data — websites you list, their metrics, prices and ownership-verification status.
• Technical data — IP address, browser type, device information, log data and cookies (see below).
• Communications — messages you send through the contact form or support channels.

• To create and secure your account and let you sign in.
• To process orders, hold funds in escrow, release payments, issue invoices and pay out publishers and affiliates.
• To pass order briefs and content to the publisher fulfilling your order.
• To verify website ownership and review listings for quality.
• To send service emails about your orders, account and payments, and — where you have opted in — product updates.
• To attribute referrals under the affiliate program.
• To prevent fraud, abuse and breaches of our Terms, and to meet legal, tax and accounting obligations.
• To understand how the platform is used and improve it.

Where data-protection laws such as the GDPR or UK GDPR apply, we rely on: performance of our contract with you (running your account and orders); our legitimate interests (security, fraud prevention, improving the service, limited marketing to existing customers); compliance with legal obligations (tax and accounting records); and your consent where we ask for it (for example, optional marketing emails), which you may withdraw at any time.

We do not sell your personal data. We share it only with:

• Publishers fulfilling your orders — they see your username, brief, content and target URLs, not your payment details.
• Service providers who host the platform, process payments, send email or provide analytics, under contracts that restrict how they use the data.
• Affiliates — an affiliate who referred you sees a masked version of your username and the value of commissions earned, not your contact details.
• Authorities and advisers where required by law or to protect our rights, and in connection with a merger, acquisition or sale of assets.

We use a small number of cookies and similar technologies:

• Essential — a session cookie that keeps you signed in, and a short-lived cookie used to secure Google sign-in.
• Referral — when you arrive through an affiliate link we set a cookie for up to 180 days so the referring affiliate can be credited if you sign up.
• Preferences — your light/dark theme choice, stored in your browser.

You can block or delete cookies in your browser settings, but you will not be able to stay signed in without essential cookies.

Our team, service providers and the publishers you work with may be located in different countries. Where personal data is transferred across borders we use appropriate safeguards, such as standard contractual clauses, as required by applicable law.

We keep account data for as long as your account is open. After closure we keep transaction and invoice records for as long as tax and accounting rules require, and other data only as long as needed to resolve disputes or enforce our agreements. Then it is deleted or anonymised.

Passwords are hashed, connections are encrypted in transit, and access to personal data is limited to staff who need it. No system is perfectly secure, so please use a strong, unique password and tell us straight away if you suspect unauthorised access to your account.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can update most details yourself in your profile. For anything else, contact us through the contact form; we may need to verify your identity first.

You also have the right to complain to your local data-protection authority.

Nova PR is a business service and is not intended for anyone under 18. We do not knowingly collect data from children.

We may update this policy from time to time. If changes are significant we will notify you by email or in your dashboard before they take effect. The date at the top shows when it was last revised.