Legal document

Nova Leads Privacy Policy

Effective date: July 16, 2026

1. Operator

The operator of Nova Leads and the person responsible for processing information within the Service is Константин Кислов, an Individual Entrepreneur registered in Georgia (the "Operator").

Identification number: 145969896
Location: Батуми, Грузия

2. Scope

This Privacy Policy (the "Policy") describes the processing of information when the Nova Leads website, Telegram bot, Telegram Mini App, public Telegram-source monitoring features, subscription, payment, and support are used.

This Policy applies only to processing carried out by the Operator. Telegram, Payment Providers, and other independent services process information under their own terms and policies.

3. Definitions

"Service" means the Nova Leads website, Telegram bot, Telegram Mini App, and monitoring features. "User" means a person using the Service. "Search" means a monitoring configuration saved by the User. "Public Source" means a supported publicly accessible Telegram chat or channel. "Message" means a third-party post in a Public Source. "Payment Provider" means an independent party involved in invoice creation and payment confirmation.

4. Information we receive

Telegram authentication data

When the Telegram Mini App starts, Telegram provides signed initialization data. The Service verifies its authenticity and validity period and receives the Telegram user identifier and, where available, username, name, and language code. Those profile data are stored in the database, but the raw initialization string, its signature, and authentication time are not stored.

Searches

The Service stores Searches belonging to the User: query text, title, selected country, city or region, category, enabled state, and creation time. This information defines the continuous monitoring parameters.

Subscription data

The Service stores the selected plan, Subscription status, start and expiration dates, Trial information, cancellation information, and record creation and update times.

Payment metadata

The Service stores the internal order number, protected idempotency key, plan, amount, currency, payment status, provider invoice and payment identifiers, invoice URL, creation and update times, confirmation identifier, and status-conflict information if a conflict occurs.

Public Telegram Messages

For monitoring, the Service stores the Public Source and Message identifiers, Message date, full text, and, where one can be generated, a public link. The Service does not store media files, separate sender information, or Message edit or deletion history.

Technical logs

Server logs contain technical events required for operation and diagnostics: operation times and outcomes, internal source, Message, match, and order identifiers, error reasons, and exception information. The server infrastructure used may also process a network address, request path, method, and response code when serving a request.

Support communications

If the User contacts support, the Operator receives the contact details provided by the User, the content of the request, and subsequent correspondence.

5. Information we do not collect

The current Nova Leads implementation does not collect or store:

the User's password or Telegram account password;
full payment card details;
private cryptocurrency keys or seed phrases;
access to the User's wallet, exchange account, or funds;
the contents of the User's private Telegram conversations;
advertising identifiers.

Nova Leads does not currently use its own cookies to identify Users or track their behavior. Telegram, payment pages, and other independent services may use their own storage technologies in accordance with their policies.

The Payment Provider and Telegram may independently receive information they require to provide their services. Such processing does not mean that Nova Leads receives or stores the secrets and payment details listed above.

6. Purposes of processing

The Operator processes information for the following purposes:

authenticating the User through Telegram and associating actions with the User's account;
creating Searches, continuously monitoring supported sources, identifying matches, and delivering Notifications;
managing the Trial, Subscription, and access to Service features;
creating a payment invoice, verifying payment confirmation, and activating the Subscription;
protecting the Service, preventing duplicate processing, and investigating errors and abuse;
handling User requests and providing support;
complying with legal obligations applicable to the Operator and protecting legal claims.

7. Public Telegram Messages

Nova Leads monitors new Messages only in supported public Telegram sources. The Service does not automatically join large numbers of sources or perform bulk extraction of historical messages.

Messages are created and published by third parties. They may contain names, contact details, and other information about individuals published by the author or another third party. Public availability of such information alone does not mean that it ceases to be personal data.

Nova Leads stores only information necessary for monitoring, matching against Searches, and delivering relevant Messages. The Operator does not verify the accuracy, currency, lawfulness, or authorship of Messages and is not responsible for decisions made solely on their basis.

8. Payment information

At Subscription checkout, the Nova Leads server creates an internal order for the selected plan and sends the Payment Provider the order number, plan, amount, currency, and an internal reference to the User. The Telegram identifier is not sent to the provider as a customer reference.

The Payment Provider creates an invoice and returns its identifiers, status, and payment URL. Payment takes place on the provider's side. Nova Leads does not receive full payment card details, a private key, a seed phrase, or access to a wallet.

The User's return to the website is not proof of payment. The Payment Provider sends signed confirmation to the server. The server verifies the signature, validity period, and uniqueness of the confirmation, matches it to the order, and activates or extends the Subscription only after a confirmed successful status.

9. Automated processing

The Service automatically matches new public Messages against active Searches using deterministic rules and selected parameters, including category and geography. When a match is found, a technical record is created and the Message may be sent to the User on Telegram.

No artificial-intelligence profiling is performed. Nova Leads does not make automated decisions that produce legal effects for the User or otherwise significantly affect the User's rights.

11. International transfers

The Operator is located in Georgia. Use of Telegram, the Payment Provider, and server infrastructure may result in information being processed in countries where the relevant services or their technical systems are located. Nova Leads does not identify or represent in this Policy that such independent services process data in particular countries unless those details are confirmed by their current infrastructure and terms.

12. Retention

Retention periods depend on operational needs: providing monitoring and the Subscription, preserving the integrity of relationships among Searches, Messages, and delivery, processing payment statuses, maintaining security, resolving disputes, and complying with legal obligations.

Nova Leads does not establish one fixed retention period for all categories of information in this Policy. Expiration or cancellation of a Subscription does not automatically delete the account, Searches, payment records, or Messages. When information is no longer required for the stated purposes, the Operator may delete or anonymize it, taking account of technical limitations and applicable obligations.

13. Security

Nova Leads applies safeguards implemented in the Service:

verification of the HMAC signature and validity period of Telegram authentication data;
server-side verification of the HMAC signature, time, and uniqueness of Payment Provider confirmations;
secure HTTPS connections for the public website and transfer to a payment invoice;
verification that Searches, Subscriptions, and payments belong to the current User;
server-side determination of price and access status instead of trusting browser data;
unique operation keys and database constraints to reduce the risk of duplicate processing.

No method of transmitting or storing information eliminates risk completely. The User must protect access to their Telegram account and must not disclose access codes, private keys, or seed phrases to third parties.

14. User rights

The User may contact the Operator to request access to information concerning the User, correction of inaccurate data, or deletion of information. The current username, name, and language code may be updated from the Telegram profile during later interaction with the Service.

A Search can be paused, resumed, or deleted through available Service features. Requests concerning the account and other records are handled through support. To protect information, the Operator may ask the User to verify that the request is connected to the relevant Telegram account.

Some information may be retained where required by law or necessary to complete a technical operation, preserve data integrity or security, resolve a dispute, or protect legal claims.

15. Children's privacy

The Service is not intended for persons under 18. The Operator does not knowingly offer them access to Nova Leads. If the Operator receives a substantiated report that information concerning a person under 18 is associated with a User account, the Operator will review the request and available measures, taking account of how the information was obtained and whether it must be retained.

A public Message posted by a third party may contain information about a minor without the Operator's knowledge. Such a Message may be reported using the contact details below.

16. Changes to this Policy

The Operator may update this Policy when the Service, information-processing practices, or applicable requirements change. The current version is published on this page with a new effective date. If the nature of a change requires a separate notice and a suitable channel is available, the Operator may provide notice through the website, Telegram bot, or Telegram Mini App.

17. Contact information

For questions about privacy or requests for access, correction, or deletion of information, contact the Operator:

Operator: Константин Кислов
Individual Entrepreneur
Identification number: 145969896
Location: Батуми, Грузия

Website: https://leads.bis.cx
Email: support@bis.cx
Telegram: @bis_cx_support