Privacy Policy

Last updated: 13 September 2026

This Privacy Policy explains what personal information NOVE Funding ("NOVE", "we", "us") collects when you use novefunding.com, the NOVE trader dashboard and the NOVE web trading terminal (together, the "Platform"), why we collect it, who we share it with, how long we keep it, and the choices you have. NOVE Funding operates a simulated-trading evaluation programme: traders complete a challenge on a demo account and, once funded, receive a share of the simulated profit they generate. No real customer money is traded.

If anything here is unclear, write to support@novefunding.com. Support answers Monday to Friday, 08:00 to 20:00 East Africa Time.

1. Who is responsible for your information

NOVE Funding is the data controller for the personal information described in this policy. You can reach us at support@novefunding.com or through the contact form at novefunding.com/contact.

2. Information we collect

We only collect information that we need to run the Platform, meet our legal obligations, or that you choose to give us.

Account information. When you register we collect your email address, first and last name, and a password, which we store only as a salted hash. You may add a phone number, country, time zone, date of birth, postal address, a public display name (alias), a Discord username, a display currency and a colour theme from your dashboard settings. We record whether your email address and phone number have been verified.

Sign in with Google. If you choose "Continue with Google", Google sends us your Google account identifier, your email address and whether Google has verified it, your first and last name, and your profile picture. Section 4 explains exactly how this is used.

Identity verification (KYC). Before a payout can be made we must confirm who you are. Identity verification is carried out by our verification provider, Didit. During verification you provide your legal name, date of birth, nationality, country of residence, residential address, and an image of a government-issued identity document together with a selfie or liveness check. We store the verification outcome, the document type and number, the details listed above, and a reference to the provider's session. Where a document is uploaded to us directly rather than through the provider, we store the file, its type, size and a checksum, and only staff with a verification role can open it.

Payment information. Challenge fees are paid through third-party payment processors: NOWPayments for cryptocurrency and Kings Midas for mobile money. In Tanzania you can also pay NOVE's official payment agent by mobile money or bank transfer; you then give us the transaction ID from your SMS, the phone number you paid from and the amount, and the agent sees those details to confirm that the money arrived. If you upload a receipt (a screenshot of the payment SMS or app, or a bank receipt), we keep the file for the agent and our staff to check, and it is read automatically by Anthropic's AI service so the form fills itself; you can correct anything before you send it. The agent's own USDT transfer receipts are read the same way. We receive and store the transaction reference, amount, currency, payment status, the cryptocurrency address or mobile phone number the payment was made from, and the processor's response. We never see or store card numbers, and we do not hold your crypto wallet keys.

Payout information. To pay you we collect the details of the payout method you register, such as the account name, the destination wallet address or mobile money number, and we keep a record of each payout request, its calculation, approval and payment reference.

Trading and Platform activity. We record everything that happens on your NOVE accounts: challenge purchases and orders, simulated trades, orders, positions, balance and equity history, rule breaches, trading statistics, certificates earned, alerts you set, saved chart layouts and workspace settings, competition entries, and messages exchanged with support.

Security and technical information. Each time you sign in or attempt to sign in we log the time, whether it succeeded, the IP address, the browser (user agent) used, and a device identifier for that browser (see section 6). We keep the IP address of your most recent successful login, failed-attempt counts and any temporary lock. If you enable two-factor authentication we store your authenticator secret so that codes can be checked. Our servers also keep standard web logs of requests to the Platform.

Communications. We keep the emails and notifications we send you, whether they were delivered, and any support tickets or messages you send us.

Referral and affiliate information. If you arrive through an affiliate link we record the referral code so the affiliate can be credited. If you join the affiliate programme we keep your commission and payout records.

Public profile information. Your alias appears on the leaderboard only if you switch on "show on leaderboard" in your settings. Certificates you earn carry your name and can be verified by anyone who has the certificate number. You can create a public share link for your account statistics; it can be disabled at any time from your dashboard.

3. How we use your information

We use the information above to: - create and secure your account, sign you in, and let you recover access; - deliver the challenge you purchased, run your simulated trading accounts, apply the trading rules you agreed to and issue certificates; - verify your identity and screen against anti-money-laundering and sanctions requirements before releasing funds; - process payments and payouts and keep the accounting records the law requires; - detect and prevent fraud, account sharing, prohibited trading strategies and abuse of the Platform; - send service messages such as verification links, security alerts when a new device signs in, payout updates and rule-breach notices; - send marketing messages only if you have opted in, with an unsubscribe link in every message; - answer support requests and resolve disputes; - run the affiliate and referral programme; - improve the Platform using aggregated, non-identifying usage statistics; - comply with legal obligations and enforce our Terms of Service.

Where privacy law requires a legal basis, we rely on the performance of our contract with you, our legal obligations (such as record keeping and anti-money-laundering rules), our legitimate interests in securing and improving the Platform, and your consent for marketing and for the optional public features described above.

4. Sign in with Google

Sign in with Google is optional. When you use it we ask Google only for the "openid", "email" and "profile" scopes. We receive your Google account ID, your email address and its verification status, your name and your profile picture. We use this information solely to create your NOVE account or to sign you in to an existing account that uses the same email address, and to show your name and picture in your own dashboard. We do not request access to your Gmail, contacts, calendar, Drive or any other Google data, and we never post to Google on your behalf.

You can disconnect NOVE from your Google account at any time at https://myaccount.google.com/permissions. If you do, you can still sign in with your email address and a password set from your dashboard settings.

NOVE's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never sold, never used for advertising, and never shared with third parties except as needed to provide the sign-in feature or as required by law.

5. Who we share information with

We do not sell personal information, and we do not share it with advertising networks. We share it only with:

- Service providers who process it on our instructions: Didit (identity verification), NOWPayments (cryptocurrency payments), Kings Midas (mobile money payments), NOVE's official payment agent in Tanzania (confirming mobile money and bank payments made to the agent), Brevo (transactional and marketing email), Anthropic (reading uploaded payment receipts), Google (sign in with Google), and the hosting and infrastructure providers that run our servers and backups. Each provider is bound by contract to protect your information and to use it only to provide its service to us. - Market data providers, which supply prices to the trading terminal and receive no personal information about you. - Regulators, law enforcement, courts and professional advisers when the law requires it, to comply with anti-money-laundering obligations, or to establish, exercise or defend legal claims. - A buyer or successor if NOVE is sold, merged or reorganised, in which case this policy continues to apply to your information. - Other users, only to the extent you choose: the leaderboard alias, certificate verification and public share links described in section 2.

6. Cookies and similar technologies

The Platform uses a small number of strictly necessary cookies: a session cookie that keeps you signed in, an optional "remember me" cookie, a token that protects forms against cross-site request forgery, and a device cookie that holds a random identifier for the browser you sign in from. We keep only a scrambled form of that identifier and use it solely to protect accounts against fraud, account sharing and multiple accounts run from one browser; it is never shared with third parties and expires after two years. If you arrive through an affiliate link, the referral code is kept in your session so the affiliate can be credited. The trading terminal stores your chart layouts, alerts and workspace preferences in your browser's local storage so they are there when you return. We do not use advertising cookies or third-party analytics trackers on the Platform. Our Cookie Policy at novefunding.com/legal/cookie-policy has more detail.

7. How long we keep information

- Account and profile information: for as long as your account exists. When you ask us to close your account we delete or anonymise it within 30 days, except for the records below. - Identity verification, payment and payout records: for the period required by anti-money-laundering and financial record-keeping laws, which is normally five years after the last transaction or the closure of your account. - Trading history and certificates: for as long as your account exists, and afterwards in anonymised form for statistics. Certificate verification remains available so that a certificate you have shared can still be checked. - Login and security logs: 12 months, unless they are needed for an open investigation or dispute. - Support correspondence: three years after the ticket is closed. - Marketing preferences: until you withdraw consent, and afterwards a record of the withdrawal so we do not contact you again.

8. How we protect information

Passwords are stored as salted hashes and never in plain text. All traffic between your browser and the Platform is encrypted with TLS. Access to personal information is limited to staff who need it for their role; every staff action on a customer record is written to an audit log with the staff member's identity, time and IP address. Identity documents can only be opened through the Platform by staff with a verification role and are never served as public files. You can add two-factor authentication to your account, and we email you when your account is accessed from a new device or browser. No system is perfectly secure; if we discover a breach that affects you we will notify you and the relevant authorities as the law requires.

9. Your rights and choices

Depending on where you live you may have the right to access the personal information we hold about you, to have it corrected or deleted, to restrict or object to its use, to receive a copy in a portable format, and to withdraw consent where we rely on it. You can:

- update your name, contact details, alias, address and preferences in Dashboard > Settings; - change your password, set a password for a Google-created account, and manage two-factor authentication in Dashboard > Security; - switch the leaderboard listing and public share link on or off in your settings; - unsubscribe from marketing email with the link in any message or by changing the marketing preference in your settings; - disconnect Google at https://myaccount.google.com/permissions; - request a copy of your information or the closure and deletion of your account by writing to support@novefunding.com from the email address on your account.

We answer requests within 30 days. Where we must keep some records to meet legal obligations (section 7) we will tell you what is kept and why. You also have the right to complain to the data protection authority in your country.

10. International transfers

NOVE serves traders in many countries, and the service providers listed in section 5 operate from data centres that may be outside your country. Where information is transferred internationally we rely on the provider's contractual safeguards and, where required, standard contractual clauses or an equivalent lawful mechanism.

11. Children

The Platform is for adults only. We do not knowingly collect information from anyone under 18, and we close any account we find to belong to a minor.

12. Changes to this policy

We may update this policy when the Platform or the law changes. The date at the top shows the version in force. For significant changes we will notify you by email or with a notice in your dashboard before the change takes effect. Earlier versions are kept so you can see what applied at any time.

13. Contact

Questions, requests and complaints about privacy: support@novefunding.com, or the contact form at novefunding.com/contact. Please write from the email address registered on your account so we can verify that the request is yours.