Privacy Policy — Novaonyx

1. Introduction

Novaonyx ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our post-quantum security solutions, including our Single Sign-On, Authentication, Secure Communications, and Video Conferencing services.

By accessing or using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

Account registration details (name, email address, organization)
Authentication credentials and public keys
Communication content encrypted with our quantum-resistant protocols
Support requests and correspondence

2.2 Automatically Collected Information

Device metadata and browser type
IP addresses and connection timestamps
Usage patterns and service interaction data
Security audit logs and access records

3. How We Use Your Information

To provide, maintain, and improve our post-quantum security services
To authenticate users and secure communications using CRYSTALS-Kyber and CRYSTALS-Dilithium
To detect and prevent security threats, fraud, and unauthorized access
To comply with legal obligations and enforce our terms
To communicate with you about service updates and security advisories

4. Data Encryption & Protection

All data processed by Novaonyx is protected using NIST-standardized post-quantum cryptographic algorithms:

CRYSTALS-Kyber: Used for quantum-resistant key encapsulation across all data transmissions
CRYSTALS-Dilithium: Used for digital signatures ensuring data integrity and authentication
End-to-End Encryption: Communication content is encrypted on the client device and cannot be decrypted by Novaonyx
Zero-Knowledge Architecture: We do not have access to your encryption keys or plaintext communication content

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

With your explicit consent
To comply with legal obligations or valid legal process
To protect the rights, property, or safety of Novaonyx, our users, or the public
In connection with a merger, acquisition, or sale of assets, with continued protection under this policy

6. Data Retention

We retain your information only for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Communication content encrypted with our protocols is processed in real-time and is not stored on our servers beyond what is required for delivery.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access and receive a copy of your personal data
Correct inaccurate or incomplete data
Request deletion of your personal data
Object to or restrict processing of your data
Data portability between services
Withdraw consent at any time

8. International Data Transfers

Our services are designed to operate across different jurisdictions. When data is transferred across borders, we ensure protection through post-quantum encryption and appropriate contractual safeguards in compliance with applicable data protection laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Contact Novaonyx