Welcome to Supernova website and apps. This Privacy Policy explains how Supernova.io Inc., whose registered office is at 1111B S Governors Ave STE 6495, Dover, 19904 Delaware, United States, Delaware entity number 7171181 (“Supernova” or “we”) works with information in relation to our website supernova.io, supernova-docs.io and apps, in particular Supernova Studio including all of its versions and app.supernova.io (collectively, the "Software"). This Privacy Policy also sets out your choices and rights in relation to the collection and use of your information and applies to all visitors, users, and others who access the Software ("Users"). As we are established under U.S. jurisdiction, we have appointed representative in the Czech Republic which is our subsidiary Supernova Corporation CZ s.r.o. with its registered office at Sokolovská 685/136f, Praha, 186 00, Czech Republic, company number 067 81 021 (“Supernova subsidiary”). This Privacy Policy is a part of Terms for using Supernova website and Software consisting of Terms & Conditions and Payment Terms as defined in Terms & Conditions.
Supernova complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) as set forth by the U.S. Department of Commerce. Supernova has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (“DPF”) program, and to view our certification, please visit:https://www.dataprivacyframework.gov/
Depending on the context and the specific processing activity, Supernova may act either as a data controller or as a data processor. Supernova acts as a data controller particularly when processing personal data for purposes related to the operation of the Software and our relationship with you (e.g., account registration and administration, authentication and access management, billing and payments, customer support, security, analytics, and marketing communications where permitted). Supernova acts as a data processor when processing personal data on behalf of its customers and in accordance with the applicable contractual documentation, in particular the Master Subscription Agreement and the Data Processing Terms (Data Processing Agreement), and only under the customer’s documented instructions.
1.1. We collect and further process the following types of information:
A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
| Strictly Necessary Cookies | ||
|---|---|---|
| Cookie Subgroup | Cookies | Cookies used |
| requests.supernova.io | dd_cookietest , amp_cookie_test | First Party |
| supernova.io | OptanonConsent , _tldtest_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx , OptanonAlertBoxClosed , amp_cookie_test | First Party |
| codesandbox.io | __cf_bm, _cfuvid | Third Party |
| app.supernova.io | Host-next-auth.csrf-token, Secure-next-auth.session-token, __Secure-next-auth.callback-url | Third Party |
These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
| Functional Cookies | ||
|---|---|---|
| Cookie Subgroup | Cookies | Cookies used |
| learn.supernova.io | docs.sid | First Party |
| status.supernova.io | psp_session , R70D0cGDPq | First Party |
| developers.supernova.io | docs.sid | First Party |
| auth.supernova.io | session , session.sig | First Party |
| www.supernova.io | nQ_userVisitId , nQ_cookieId | First Party |
| requests.supernova.io | _dd_s | First Party |
| supernova.io | _hjIncludedInSessionSample_3297091 , ajs_anonymous_id , tld , amplitude_testsupernova.io | First Party |
| serve.albacross.com | nQ_cookieId, nQ_userVisitId | Third Party |
| portal.productboard.com | cookieyes-functional, cookieyes-advertisement, cookieyes-necessary, cookieyes-analytics, cookieyesID, cky-consent | Third Party |
| typeform.com | tf_respondent_cc, __cf_bm, attribution_user_id | Third Party |
| cdn-cookieyes.com | _ga | Third Party |
| cdn.productboard.com | dd_cookietest, _dd_s, amp_cookie_test | Third Party |
| youtube.com | VISITOR_INFO1_LIVE | Third Party |
| form.typeform.com | AWSALBTGCORS, AWSALBTG | Third Party |
| supernova-docs.io | docs.sid | Third Party |
| www.figma.com | figma.session, figma.ref | Third Party |
| figma.com | ajs_anonymous_id | Third Party |
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
| Performance Cookies | ||
|---|---|---|
| Cookie Subgroup | Cookies | Cookies used |
| requests.supernova.io | _mkto_trk , _ga | First Party |
| supernova.io | _gat_gtag_xxxxxxxxxxxxxxxxxxxxxxxxxxx , _hjAbsoluteSessionInProgress , _ga_xxxxxxx , _ga , _hjSessionUser_xxxxxx , _hjSession_xxxxxx , _hjFirstSeen , _hjIncludedInSessionSample_xxx , _gid , _hjTLDTest | First Party |
| productboard.com | _ga | Third Party |
| FullStory | fs_uid, fs_lua | Third Party |
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
| Targeting Cookies | ||
|---|---|---|
| Cookie Subgroup | Cookies | Cookies used |
| supernova.io | amp_ , ajs_user_id | First Party |
| youtube.com | CONSENT, YSC | Third Party |
When you access the Software, you disclose certain information related to your hardware and software that we automatically collect. For example, we may collect in particular your IP (Internet Protocol) address, operating system, browser type, access times, pages visited, search terms, mobile carrier, device type, device IDs, application IDs, and other meta data. We collect this information to generate statistics about use of the Software and use the results to customize as well as improve the overall quality of the Software (the “Log data”).
1.2. The payments for Software are processed by a third party, and we do not store or process any data regarding your payments or means of payment (such as credit card details etc.). In terms of payment, you will be redirected to the relevant third party.
2.1. In addition to some of the specific uses of information we describe in this Privacy Policy, we may use information that we receive to:
2.2. We process your information mainly to fulfil our mutual contract. When you download our Software and agree with our Terms & Conditions, you enter into the contract with us by the terms of processing of personal data.
2.3. We also process your information on the basis of legitimate interests which are stipulated in Article 2.1. points (ii), (iv), (v), (vi), (vii), (viii) and (ix). Our legitimate interest lies in improving the functionality of the Software. For the purpose of this processing, we considered interests of our Users and evaluated that the processing is possible.
2.4. We also process your information in regards of payment and provision of Software to fulfill our legal duties, e.g., tax and accounting duties or other relevant duties that we should abide while providing Software.
2.5. We do not use our customers’ personal data to train, develop, or improve any machine learning models, including large language models or other AI systems. We process such customer data in accordance with this Privacy Policy and, where we act as a personal data processor, in accordance with the Data Processing Terms and the Master Subscription Agreement, and only on the customer’s documented instructions.
3.1. We will not rent or sell your information to third parties outside Supernova without your consent. We will not also share your information with third parties except companies that help us with developing and testing our products. We also share your information with workers and freelancers of Supernova subsidiary.
3.2. The data may be also stored by the following cloud providers (processors):
3.3. We may also use the services of third parties, that help us with processing your information on the basis of legitimate interest. Although some of the companies are settled in the US, we have concluded relevant data processing contracts and the export of information is made under Standard contractual clauses or under Data Privacy Framework. We also evaluated the risks connected with using of this third-country parties. A list of such services (Vendors & Subprocessors) is available here. Types of such third parties:
3.4. We may remove parts of data that can identify you and share aggregated and/or de-identified information with other parties. Where possible, we share data in a form that does not directly identify you (including through pseudonymous identifiers) and we may combine such information to produce aggregate statistics that are no longer associated with an individual User.
3.5. We do not add any cookies to customer sites. The cookies described in this Policy only apply to Supernova’s own marketing and product pages, not websites, exporters, or other products that are created with Supernova or published via supernova-docs.io. Customers may make changes to their published projects at their own discretion that may cause cookies to be added on Supernova's subdomains (for example, enabling Google Analytics), but these changes are optional and not made by Supernova which has no responsibility.
3.6. We may access, preserve and share your information to comply with legal requirements. We may also access, preserve and share information when it is necessary to: detect, prevent and address fraud and other illegal activity; to protect ourselves, you and others, including as part of investigations. Information we receive about you may be accessed, processed and retained for an extended period of time when it is the subject of a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm. Supernova shall disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
3.7. If we transfer personal information to third parties, we always meet obligations set out in DPF, namely:
3.8. Supernova shall remain liable under the principles set out in DPF (“DPF Principles”) when onward transfers to third parties are applicable and has responsibility for the processing of personal information when transferring to other recipients, mainly if its agent or sub-processor processes such personal information in a manner inconsistent with the DPF Principles, unless Supernova proves that it is not responsible for the event giving rise to the damage.
4.1. Taking into account the state of the art, scope, context and purposes of processing of your personal information as well as the risk of varying likelihood and severity for your rights and freedoms, we take reasonable steps to protect and secure your personal information against unauthorized access or disclosure. We use security software to protect the confidentiality of your personal information. We review our business practices periodically for compliance with policies and procedures governing the security of our information.
4.2. To register with the Software, you will be required to select a password to protect your account unless you log in with your account using a third-party service (Google or GitHub account). You must keep your password confidential.
5.1. You can update your account information at any time by logging in and changing your profile settings.
5.2. You are entitled to unsubscribe from email communications from us by clicking on the "unsubscribe link" provided in such communications.
6.1. As a personal data controller Wwe store and process your personal information for the period of your use of the Software. Following termination or deactivation of your account, Supernova may retain information (including your profile information) and User Content for a commercially reasonable time for backup, archival or audit purposes or for establishment, exercise or defense of our legal claims. As a general rule, such information is retained for up to 3 years after termination or deactivation, unless a longer retention period is required to comply with our legal obligations (e.g. tax and accounting requirements) or unless it is necessary to retain the data for the duration of ongoing proceedings or to address a specific legal claim.
7.1. We take reasonable measures to ensure that you are able to keep your personal information accurate and up to date. You can always ask us to confirm whether or not we process your personal information and if we do, to what extent, and require access to it.
7.2. In accordance with applicable laws and as further detailed below, you have the right to request access to, rectification, erasure or portability (e.g. to another service provider) of your personal information that we process, as well as to request restriction of such processing. You can also withdraw your consent that you have given to us at any time (if we process your personal data on the basis of the consent). Please note that withdrawal of your consent does not affect lawfulness of any processing done on the understanding that you had given the consent before.
7.3. Access. You have the right to obtain confirmation from us as to whether or not we are processing your personal data. If we process your personal data, you also have the right to request access to information about the purpose and scope of the processing, the recipients of the data, the duration of the processing, the right to rectification, erasure, restriction of processing and to object to the processing, the right to lodge a complaint with a supervisory authority and the sources of the personal data (this information is already provided in this document). You can also ask us for a copy of the personal data we process. The scope of the data provided may be limited so as not to interfere with the rights and freedoms of others.
7.4. Inaccurate information. If you find out that your personal information is inaccurate or incomplete and you are unable to update this information according to Section 5 of this Privacy Policy, you may request us to update such personal information. We will verify your information accordingly without undue delay and update it if needed.
7.5. Erasure of your personal information. You can request that we erase your personal information at any time. We will also delete all your personal information in case you withdraw your consent or under the circumstances that applicable laws require us to do so. If you approach us with a request to delete your personal information, we will delete (and ensure deletion by the processors that we engage) your personal information we have without undue delay, provided that it is no longer necessary for provision of the Software or there is no other legal ground for the processing.
7.6. Restriction of processing. If you request to restrict the processing of your personal information, e.g. in circumstances when you contest the accuracy of your personal information, or lawfulness of our need to process your personal information, we will limit processing of your personal information to the necessary minimum (storage). In such case, if applicable, we will process your personal information only for the establishment, exercise or defense of legal claims or, where necessary, for protection of rights of another natural or legal person, or other limited reasons dictated by the applicable law. In case the restriction is lifted and we continue processing your personal information, we will inform you accordingly without undue delay.
7.7. Portability of your personal information. You have the right to receive personal data which relate to you and you have provided to us. If you approach us with such request, we will provide you with your personal information in a commonly used and machine-readable format. If you request so, we may also send your personal information to a third party (another data controller) which you may identify in your request, unless such request would adversely affect rights or freedoms of others or it would not be technically feasible.
7.8. Objections to direct marketing. If you no longer wish to receive marketing or promotional materials from us or you do not wish that your personal information is used for profiling as related to such marketing or promotional activities, you can request that we cease the use of your personal information for these purposes. In such case, you will no longer be able to benefit from some of the Software or specific features for which this category of processing is essential (i.e. the receipt of (personalized) marketing and promotional materials).
7.9. If you exercise any of your rights according to this Section or applicable laws, we will communicate any rectification or erasure of your personal data or restriction of processing in accordance with your request to each recipient to whom the personal information has been disclosed pursuant to Section 3, unless such communication proves impossible or involves disproportionate effort.
7.10. If you wish to exercise these rights and/or obtain all relevant information, please contact support@supernova.io. We will respond within 1 month after receipt of your request, but we retain the right to extend this period by up to 2 additional months if necessary. We will in any event inform you within 1 month after receipt of your request whether it is necessary to extend the period to respond.
7.11. You have the right to submit a complaint concerning our data processing activities to the competent supervisory authority, which is, for Supernova subsidiary being subject to Czech jurisdiction, the Office for Protection of Personal Information (www.uoou.cz). Supernova is also subject to the investigatory and enforcement powers of the Federal Trade Commission („FTC“).
7.12. In addition to all rights mentioned above and in compliance with the EU-U.S. DPF, Supernova commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF should first contact Supernova at: support@supernova.io.
7.13. In compliance with the EU-U.S. DPF, Supernova commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) with regard to unresolved complaints concerning our handling of data received in reliance on the EU-U.S. DPF.
8.1. Supernova is obliged to arbitrate claims and follow principles under Annex I of the Data Privacy Framework. These articles stipulate conditions for the individual to invoke binding arbitration.
8.2. If Supernova violates principles, under which it was certified to Data Privacy Framework (available here: https://www.dataprivacyframework.gov/s/article/A-Scope-dpf?tabset-35584=2, hereinafter also as “Principles”) and such violation remains fully or partially unremedied, individual may invoke arbitration. Decision of individual to invoke is entirely voluntary.
8.3. The arbitration will be held by the EU-U.S. Data Privacy Framework Panel which has the authority to impose relief (such as access, correction, deletion, or return of the individual’s data in question) necessary to remedy the violation of the principles only with respect to the individual. Each party bears its own attorney’s fees.
8.4. Before invoking the arbitration, individual must take following steps prior to initiating:
Arbitration may not be invoked in situations stipulated herein: https://www.dataprivacyframework.gov/s/article/C-Pre-Arbitration-Requirements-dpf?tabset-35584=2, where the individual can also learn about other conditions of the arbitration.
8.5. FTC action may proceed in parallel with arbitration.
8.6. Supernova and individual may agree on language of arbitration. If nothing agreed, the language will be English.
9.1. This part applies only to a natural person who is a California resident according to relevant law.
9.2. Supernova does not sell any category of personal data being processed according to the Article 1.1. of this Privacy policy. Supernova does not collect any sensitive personal information.
9.3. All categories of personal data are processed under criteria set out in Article 6.1 of this Privacy policy.
9.4. Under CCPA and CPRA you have:
Additional information provided to you:
You also have these rights:
All of rights mentioned above will be exercised according to the CCPA and CPRA
9.5. Any consumer that falls within the scope of CCPA and CPRA has the right to exercise their rights mentioned above. These may be executed via e-mail support@supernova.io or via 1 724 790 4650
10.1. We are not responsible for the practices related to personal data protection employed by any websites or services linked to or from our Software, including the information or content contained within them.
11.1. If you have any questions about this Privacy Policy or the Software, please find contact us at support@supernova.io.
12.1. Supernova reserves the right to modify or update this Privacy Policy from time to time. We shall inform you in advance about every substantial amendment hereof. Your continued use of the Software after any modification to this Privacy Policy will constitute your acceptance of such modifications made by us from time to time. Should any of the modifications of the Privacy Policy require your consent, we will contact you in order to obtain your consent herewith.
Effective date: March 1st, 2026