TJ NOVA LTDCompany No. 17308318
Legal

Privacy Policy

How TJ NOVA LTD collects, uses, shares, protects and retains personal data.

Last updated: 10 July 2026. This Privacy Policy applies to TJ NOVA LTD websites, applications, products, support channels, orders and related services. The English version is authoritative; the complete Chinese translation is provided for convenience.

1. Controller and contact

TJ NOVA LTD, Company No. 17308318, registered office 124-128 City Road, London, EC1V 2NX, United Kingdom, is the controller of personal data described in this Policy unless a product notice identifies another role. Privacy questions and rights requests may be sent to info@tjnovaltd.com. Security incidents should be reported to security@tjnovaltd.com.

2. Data we collect

  • Identity and contact data: name, organisation, email address, postal address and communication preferences.
  • Account data: account identifier, authentication events, settings, language, plan, access rights and security history. Passwords should be stored only in protected hashed form by the relevant authentication provider.
  • Order and billing data: products, order references, invoices, amount, currency, tax status, payment status, refunds and limited transaction metadata.
  • Product and content data: prompts, files, images, resumes, reviews, CSV data, form responses, custom-work instructions and outputs you choose to submit or save.
  • Support and communications: messages, attachments, survey responses, complaint records and support history.
  • Technical and usage data: IP address, device and browser information, timestamps, requested URLs, referral source, diagnostic events, approximate location derived from IP and interactions with the Service.
  • Cookie and local-storage data: session, security, consent, theme, language and analytics identifiers as described in our Cookie Policy.

Please do not submit passwords, private keys, secret tokens, full payment-card numbers, government identifiers, health records or other highly sensitive data unless a Service clearly requests it through an appropriate secure channel.

3. Sources of data

We obtain data directly from you; automatically from your device when you use a Service; from payment, authentication, hosting and analytics providers; from an organisation that provides your access; and from public sources where reasonably necessary for company verification, security, fraud prevention or the requested research service.

4. Purposes and lawful bases

  • Contract: create and administer accounts, process orders, provide products, deliver custom work, manage subscriptions and credits, respond to support and issue refunds.
  • Legitimate interests: secure and improve Services, diagnose faults, prevent fraud and abuse, keep business records, understand aggregate use and protect legal rights, balanced against your rights.
  • Legal obligation: maintain tax and accounting records, respond to lawful requests, enforce sanctions and comply with consumer, company and data-protection law.
  • Consent: use non-essential cookies, send consent-based marketing or process data where consent is the appropriate basis. You may withdraw consent at any time without affecting earlier lawful processing.

5. Product content, local tools and AI

Some tools state that processing occurs locally in your browser. For those features, imported content is intended to remain on your device unless you choose an export, synchronisation, support or external-provider function. Browser storage may retain preferences or in-progress work until you clear it.

Where a Service sends prompts or files to an external AI or infrastructure provider, we disclose that boundary in the product or its workflow where reasonably possible. The provider receives only data needed to perform the request and processes it under its contract and applicable terms. Remove unnecessary personal data before importing reviews, resumes, images, CSV files or prompts. Do not use outputs as the sole basis for decisions with legal or similarly significant effects on a person.

6. Payments

TJ NOVA LTD does not operate as a bank, wallet, money transmitter or regulated payment service provider. Payments are handled through third-party provider-hosted payment flows or manual payment instructions. Payment providers collect and process payment credentials under their own privacy notices. We may receive payment status, transaction reference, billing email, amount, currency, fraud indicators and refund status. We do not intentionally store full payment-card numbers on our servers.

7. Sharing and processors

We disclose personal data only where reasonably necessary to: cloud hosting and storage providers; authentication, email and support providers; payment processors; analytics and security providers; AI model providers selected by a Service; professional advisers; logistics and fulfilment providers; and authorities or counterparties where required by law or a legitimate corporate transaction. Providers may use data only for contracted services, subject to appropriate confidentiality and data-protection terms. We do not sell personal data for money.

8. International transfers

Providers may process data outside the United Kingdom. Where UK data-protection law requires safeguards, we use an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another lawful transfer mechanism, together with supplementary measures where appropriate.

9. Retention

We retain personal data only as long as needed for the purpose collected, including service delivery, support, security, dispute resolution and legal, tax and accounting duties. Retention varies by record: account data normally lasts for the account plus a reasonable closure period; transaction and tax records may be kept for the legally required period; security logs are kept for a shorter risk-based period; and local-browser data remains until you clear it. We delete or anonymise data when it is no longer required, subject to backups and legal holds.

10. Security

We use proportionate technical and organisational measures, which may include access controls, encryption in transit, protected authentication, logging, backups, provider review and least-privilege access. No system is completely secure. Report suspected compromise promptly and do not send live credentials by email.

11. Your rights

Depending on applicable law, you may have rights to access, correct, erase or restrict personal data; object to processing; receive portable data; withdraw consent; and complain to a supervisory authority. We may need to verify identity and may retain information where law permits or requires it. In the United Kingdom, you may complain to the Information Commissioner's Office at ico.org.uk. Please contact us first where possible so we can investigate.

12. Marketing, children and automated decisions

Service messages may be sent where necessary to operate your account or order. Marketing is sent only where lawful, and every marketing message will provide an unsubscribe route. Our general Services are not directed to children under 13, and we do not knowingly collect their data without a lawful basis. We do not make solely automated decisions that produce legal or similarly significant effects unless a product notice explains the logic, significance and available safeguards.

13. Changes and contact

We may update this Policy to reflect changes in products, providers or law. The current version and update date will remain on this page; material changes will receive additional notice where required. Contact info@tjnovaltd.com for privacy questions or rights requests.