Privacy Policy

TNova Labs ("we," "us," "TNova") operates tnovalabs.com. This page explains what data we collect, why, and how you control it. If anything is unclear, email us — we will answer within one business day.

What we collect

Audit-form and tool-form submissions

When you submit our Lead-Leak Audit, Speed-to-Lead Score, or Marketing Budget Calculator forms, we collect:

• Your business URL
• Your email address
• Optionally a phone number (for tools that require it)
• A Cloudflare Turnstile token (anti-bot, discarded after validation)
• Approximate IP-derived metadata (country, ISP — no precise location)

We use this to deliver the audit or report you requested, send a confirmation email, and follow up once or twice with reminders. Data is stored in Supabase (Postgres, US region) and Resend (email delivery, US region). We do not sell or share it with third parties for marketing.

Analytics

We use Google Analytics 4 to count page views, see which pages people visit, and measure form-submission conversion. GA4 sets cookies and collects: page URL, referrer, browser type, screen size, anonymised IP. We do not enable Google Signals or cross-device tracking.

Server logs

Our hosting provider (Vercel) keeps standard server logs of requests for ~30 days for security and debugging. These contain IP, URL, user agent, timestamp.

What we do not collect

• We do not collect health-related personal data (PHI). The site is not a HIPAA-covered application.
• We do not run third-party advertising pixels (no Meta Pixel, no LinkedIn Insight Tag) on this site as of May 8, 2026. If we add any, this policy will be updated and noted.
• We do not sell or rent your contact information.

How long we keep your data

• Audit/tool form submissions: 24 months from submission, then hard-deleted.
• Email-list subscribers: until you unsubscribe, then 90 days.
• Active client data (after you sign a contract): kept for the engagement plus 36 months for audit/legal purposes.

Your rights

Regardless of where you live, you can email hello@tnovalabs.com to request:

• A copy of all data we hold about you
• Correction of inaccurate data
• Deletion of your data
• Opt-out of any marketing communications

We respond within 7 business days. California (CCPA), EU (GDPR), and UK (UK-GDPR) residents have additional rights — they apply equally regardless of jurisdiction in our practice.

Cookies

We use a small number of first-party cookies for analytics (GA4) and Cloudflare Turnstile. We do not use marketing cookies on tnovalabs.com itself. You can disable cookies in your browser; the site will continue to work, only analytics will stop counting you.

Children

tnovalabs.com is not directed at children under 16. We do not knowingly collect data from children.

Third parties we use

• Vercel — hosting (US)
• Cloudflare — DNS + Turnstile bot protection (US)
• Supabase — database for form submissions (US)
• Resend — transactional email delivery (US)
• Sanity — content management for blog and portfolio (EU)
• Google Analytics 4 — anonymised pageview analytics

Changes to this policy

We will update this page when our data practices change. The "last updated" date at the top reflects the most recent revision. For material changes (new third party, new data type), we will notify previous form-submitters by email.

Contact

Questions, requests, or complaints — hello@tnovalabs.com.