Meganova
GDPR Compliance
Data Handling
MegaNova's privacy policy states it is based in the United States and that information may be transferred to and processed in the U.S. and other countries. Enterprise documentation says customers can choose where data is processed and stored and FAQ mentions custom regions for Enterprise, but no primary-source document found guarantees an EU-only region or states that inference always stays in the EU.
Privacy policy says personal information is retained as long as necessary to provide the services and for legitimate purposes such as business/financial records, legal compliance, dispute resolution, enforcing agreements, and safety/security/auditing/product improvement. FAQ says user prompts and outputs are not stored beyond temporary processing and there is no long-term storage of prompts/outputs.
Privacy policy says they collect content users upload or generate, including prompts, files, messages, model preferences, and usage settings. It also says they use personal information to improve, research, and develop the services, including analytics, quality assurance, safety systems, testing, anonymization/aggregation, and new features, but it does not explicitly state whether API customer data is used to train models.
Certifications & EU AI Act
Verification
Primary-source privacy documentation exists and identifies the company as US-based (Nebula Nova Inc., Delaware) with SCCs referenced for international transfers. Public docs mention temporary processing for prompts/outputs and Enterprise data residency/custom regions, but no public DPA, sub-processor list, or explicit statement confirming EU-only inference or no-training-on-customer-data was found.