Who we are

Sukuino LLC, doing business as QA Nova, NueroNova, Starship Nova, Nova, and NeuroNova provides live classroom and event Q&A with a voiced AI companion under the QA Nova, NueroNova, Starship Nova, Nova, and NeuroNova brands. This policy covers our website, host dashboard, student join links, native applications, and related APIs.

If you use Nova through a school or other organization, that organization may have its own rules about classroom data. This policy describes what the Company does as the service provider.

© 2026 Sukuino LLC. All rights reserved. QA Nova, NueroNova, Starship Nova, Nova, NeuroNova, Sukuino, nueronova.ai, and neuronova and related names, characters, voices, designs, and marks are proprietary to Sukuino LLC, doing business as QA Nova, NueroNova, Starship Nova, Nova, and NeuroNova. The Service is closed-source proprietary software. No open-source, Creative Commons, or implied license is granted.

Ownership and proprietary rights

The Service is proprietary, closed-source software. Sukuino LLC, doing business as QA Nova, NueroNova, Starship Nova, Nova, and NeuroNova exclusively owns all copyrights, trademarks, trade secrets, patents, trade dress, and other intellectual-property and creative rights in QA Nova, NueroNova, Starship Nova, Nova, NeuroNova, Sukuino, nueronova.ai, and neuronova, the Nova character and voice, software, models, prompts, documentation, and all Output the Service generates, as further described in the Terms of Service.

Submitting personal information or User Content does not transfer any ownership of the Service to you, does not make the Service open source, and does not give you any right to copy, license, or create derivative works of Company Intellectual Property. Anonymized, de-identified, and aggregated information derived from use of the Service is owned exclusively by the Company and is not personal information.

The Terms of Service contain the binding license grant, assignment of Feedback and Output, reservation of all rights, and restrictions on reverse engineering and competing use. This Privacy Policy explains privacy practices only.

Information we collect

We collect only what we need to run accounts, live sessions, billing, and security. We do not require session participants to create an account.

• Account information: email address, display name, password (stored as a one-way hash, never in readable form), and optional Google account identifiers if you choose Google sign-in. Google may also provide a profile image.
• Organization information: school or organization name, optional domain, member list, and roles (owner, admin, or host).
• Session content: session title and settings, questions people ask, Nova’s replies, and an optional first name used only to announce that someone joined.
• Usage and billing records: subscription status, included allowance, overage amounts, and related customer identifiers. We do not collect or store full payment card numbers.
• Technical information: network and device signals such as IP address, browser type, and similar request metadata. We use these to operate live rooms, enforce capacity, prevent abuse, and keep a limited administrative audit trail.
• Support messages: anything you send us about your account or a privacy request.

How we use information

We use the information above to:

• Create and maintain host accounts, organizations, and live sessions.
• Authenticate you, keep you signed in, and recover access with extra verification when an account enables it.
• Generate answers and spoken audio for Nova during a session.
• Apply family-friendly filters and usage limits so rooms stay appropriate and within plan allowances.
• Process subscriptions, invoices, and metered overage.
• Detect, investigate, and prevent fraud, abuse, and unauthorized access.
• Respond to privacy, support, and legal requests.

Parties to whom information is disclosed

We do not sell personal information. We do not share it with advertising networks or data brokers. We disclose information only as described here.

• OpenAI, to generate session answers from the question text and limited conversation context.
• ElevenLabs, to turn Nova’s reply text into spoken audio.
• Stripe, to create customers, run checkout, manage subscriptions, and meter overage. Card details are entered on Stripe’s pages, not on ours.
• Google, only if you choose Google sign-in, so we can verify that sign-in.
• Amazon Web Services, which hosts the Nova website, application, and stored data.
• A link-shortening provider, when we offer a short classroom invite link. Opening that link can tell the provider that the invite was used.
• Other people in the same live session, who can hear or see questions and answers in that room. Organization owners and admins can see member and usage information for their organization.
• Authorities or advisers, if the law requires it or we must protect people, the service, or our rights.

Method of disclosure

When we disclose information to a processor, we send only what that processor needs, over an encrypted internet connection. We do not post personal information in public directories, and we do not sell mailing lists.

• AI and voice processors receive session text through authenticated application programming interfaces protected with transport encryption.
• Payments are handled by redirecting you to Stripe’s hosted checkout or customer portal, or by sending subscription and usage events to Stripe over an encrypted connection.
• Google sign-in uses a short-lived identity token that we verify with Google; we do not receive your Google password.
• Live session content is delivered to devices that joined that session, over encrypted connections.
• Short invite links, when used, are opened in the participant’s browser and follow ordinary HTTPS redirects.
• Legal disclosures, if ever required, are made through documented legal process—not through informal sharing.

• OpenAI privacy policy
• ElevenLabs privacy policy
• Stripe privacy policy
• Google privacy policy
• AWS privacy

Security practices

We protect personal information with layered controls. This section describes those practices at a level that is useful to you without publishing details that would help someone attack the service.

• Encryption in transit: the public website and APIs are served over HTTPS so information is protected while it travels between your device and Nova, and between Nova and the processors listed above.
• Account secrets: passwords are stored as one-way hashes. We cannot read your password, and we never log it.
• Signed-in sessions: we keep you signed in with a cookie that is not readable by page scripts, is limited to our site, is marked secure on HTTPS, and expires after a limited time.
• Access control: hosts see their own sessions and billing. Organization data is limited to members of that organization. Privileged operator actions require an extra proof of identity beyond ordinary sign-in.
• Session invites: join links use unguessable values. We store invite material and related technical identifiers in protected forms so they are not kept as ordinary readable text.
• Payment data: full card numbers are collected and stored by Stripe, not by Nova.
• Server credentials: API keys and similar secrets stay in server-side configuration. They are not embedded in the public website.
• Abuse controls: we apply automated limits and content filters to reduce misuse of live rooms. We do not publish the exact thresholds.
• Least disclosure: we send processors only the fields they need for that task.

Cookies and similar technologies

We use a strictly necessary sign-in cookie to keep hosts logged in. We do not use advertising cookies, and we do not currently run third-party analytics or advertising SDKs on the Nova site.

Children and classrooms

Nova is built for hosts such as teachers and event organizers. People who join a session with an invite link do not need an account. We do not require them to provide an email address, last name, or other contact details.

An optional first name may be shown so the host can see that someone joined. Hosts should not ask participants to share extra personal information in questions. We do not use session questions or answers for advertising, and we do not sell children’s information.

If you are a parent, guardian, or school official and believe a child provided personal information that should be removed, contact us through the Service.

How long we keep information

We keep account, organization, billing, and session records for as long as the account is active and as long as we need them to operate the service, prevent abuse, and meet tax or legal duties. When you close an account or ask us to delete personal information, we remove or de-identify it except where we must retain a limited record (for example, a billing or security event).

Your choices

You can update account details while signed in, manage billing through the Stripe customer portal, and leave a session at any time. You may request access to or deletion of personal information we hold by contacting us through the Service. We may need to verify that the request comes from the right person or organization before we act on it.

International processing

Nova is hosted in the United States. If you use the service from another country, your information is processed in the United States and may be processed in other countries where our processors operate.

Changes to this policy

If we change this policy in a material way, we will update this page and the “Last updated” date. Continued use of Nova after an update means you accept the revised policy.

Terms of Service

Access to and use of the Service, including all licenses, ownership, creative rights, Feedback assignments, and restrictions, are governed by the Terms of Service. If this policy and the Terms conflict on ownership or license of the Service, the Terms control.

• Read the Terms of Service