Novabox Privacy Policy

Effective date: October 7, 2026
App: Novabox, an email app for Windows, made by Novawave LLC ("Novawave", "we", "us")
Contact: [email protected] · https://novawave.llc/novabox

1. The short version

• Novabox lets you read and manage several Gmail accounts in one app.
• Your email stays between your PC and Google. Novabox connects directly from your computer to Google. Novawave does not run any server that receives, stores or reads your email.
• We never sell your data, never use it for advertising, and never use it to train AI models.
• You can remove an account and delete its data at any time.

2. Information Novabox accesses

2.1 Google account data (Gmail)

When you choose "Sign in with Google," you give Novabox permission to access your Gmail account using Google's official sign-in (OAuth). Novabox never sees or stores your Google password.

Novabox requests these Google permissions:

Novabox only does these things when you ask it to, or to keep your mailbox in sync (for example, checking for new mail).

2.2 Information stored on your computer

To work quickly and offline, Novabox stores on your own computer:

• copies of your messages, attachments you open, labels and drafts
• a search index of your mail
• your app settings (signatures, theme, notifications)
• sign-in tokens from Google, kept in Windows Credential Manager (encrypted by Windows)

This data is not sent to Novawave.

2.3 Information we may receive

• Purchases: if you buy Novabox Pro, payment is handled by the Microsoft Store. We receive only what Microsoft provides to confirm your license; we never receive your card details.
• Support: if you email us, we receive your message and email address.
• Crash reports (optional): if you turn this on, Novabox may send technical crash information (app version, Windows version, error details). Crash reports never include email content, addresses, subjects or attachments.

3. How we use information

We use information only to:

• provide Novabox's email features you see in the app
• process Pro licenses
• answer your support requests
• fix bugs and keep the app secure

4. Google user data: Limited Use

Novabox's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• Gmail data is used only to provide and improve the user-facing email features of Novabox.
• Gmail data is not transferred to anyone else, except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you.
• Gmail data is not used for advertising, including retargeting or personalized ads.
• Gmail data is not sold, and is not used to train or develop AI or machine-learning models.
• No person at Novawave reads your Gmail data, unless you give us clear permission for specific messages (for example, to fix a problem you reported), it is needed for security reasons such as investigating abuse, or the law requires it. Because Novabox stores your mail only on your computer, in normal use we have no access to it at all.

5. Our website and service providers

This policy covers the Novabox app. When you visit our website, https://novawave.llc (for example, to download Novabox or read this page):

• Hosting: the website is hosted by Vercel, which processes standard technical data such as IP address and browser type to deliver the pages.
• Analytics: the website uses Google Analytics to understand visits (pages viewed, approximate location, device type). You can opt out with Google's browser add-on or your browser's privacy settings. Google Analytics is used on the website only. It is not built into the Novabox app and never receives any Gmail data.
• Email: our business email runs on Google Workspace, so support emails you send us are stored there.

6. Sharing

We do not sell or rent personal information. We share information only:

• with the service providers named in section 5, for the website and support email
• with Google, as needed for the app to work with your Gmail account
• with Microsoft, for Store purchases and app updates
• if required by law, or to protect the safety and rights of users or Novawave

7. Data retention and deletion

• Remove an account: in Novabox, open Settings › Accounts › Remove. This deletes that account's local data from your computer and revokes Novabox's access token.
• Uninstall: uninstalling Novabox and deleting its app data folder removes all stored mail and settings from your computer.
• Revoke access from Google: at any time, go to myaccount.google.com/permissions and remove Novabox.
• Support emails: kept for up to 24 months, then deleted. Ask us to delete them sooner at [email protected].

8. Security

• Sign-in uses Google's OAuth with PKCE; your password is never shared with Novabox.
• Tokens are stored in Windows Credential Manager.
• Connections to Google use encrypted HTTPS.
• Novabox blocks remote images and scripts in emails by default to reduce tracking and attacks.
• Your mail on your computer is only as safe as your computer, so we recommend a Windows password and device encryption (BitLocker).

9. Children

Novabox is not intended for children under 13 (or under 16 in the EU and UK). We do not knowingly collect information from children.

10. Your rights

Depending on where you live (for example under GDPR in the EU/UK or CCPA in California), you may have the right to access, correct, delete or export your personal information, or object to how it is used. Because your email is stored only on your own computer, you control it directly. For anything we hold (such as support emails), contact [email protected].

11. Changes to this policy

If we change this policy, we will update the effective date above and, for important changes, tell you in the app before they take effect.

12. Contact

Novawave LLC
522 W Riverside Ave, Ste N
Spokane, WA 99201-0581
United States
[email protected]