Privacy Policy

Effective: April 27, 2026  ·  Applies to: novagov.tech, zentarailabs.com, and all NovaGovAI services

1. Data Controller

The data controller for all NovaGovAI services is:

For self-hosted and DICT GovCloud deployments, the Local Government Unit is the data controller for all citizen and operational data stored on their own infrastructure. Zentarai Labs has no access to that data and acts only as a software provider.

2. What Data We Collect

Platform users (LGU officials)

• Email address and name (for account creation and authentication)
• Session activity logs (page access, timestamps — for security auditing)
• AI Query Console inputs: the text of questions submitted to the AI assistant

Citizen users (novagov.tech super app)

• Reports submitted through the citizen portal (description, location, photos if attached)
• Welfare screening responses (if the citizen voluntarily submits them)
• Device type and browser version (for compatibility — not linked to identity)

What we do NOT collect

• Government-issued ID numbers (SSS, PhilHealth, TIN, UMID)
• Financial account details
• Biometric data
• Location data beyond what a citizen explicitly provides in a report

3. How We Use Data

• To authenticate users and maintain secure sessions
• To deliver AI-assisted analysis and compliance reports to authorized LGU officials
• To route citizen reports to the appropriate LGU department
• To generate anonymized usage statistics for platform improvement
• To respond to support and security inquiries

We do not sell, rent, or share personal data with advertisers or data brokers. Ever.

4. Third-Party AI Processing (Anthropic)

5. Data Retention

• Session data: 30 days from last activity
• AI query logs: 90 days, then permanently deleted
• Citizen reports: Retained for the duration of the LGU's service agreement, then deleted or exported per the LGU's instruction
• Account data: Deleted within 30 days of account closure request

On service termination, Zentarai Managed deployment data is exported in open formats (PostgreSQL dump, CSV) and delivered within 14 days. No proprietary lock-in.

6. Data Subject Rights (RA 10173)

Under the Data Privacy Act, Philippine residents have the right to:

• Be informed — what data we hold about you (this document)
• Access — request a copy of your personal data
• Correction — request correction of inaccurate data
• Erasure — request deletion of your personal data, subject to legal retention requirements
• Object — object to processing of your personal data
• Data portability — receive your data in a structured, machine-readable format

To exercise these rights, contact: landon@zentarailabs.com. We respond within 15 business days.

7. Security

• All connections encrypted with HTTPS/TLS 1.3
• Passwords stored as SHA-256 hashes — never in plaintext
• Role-based access control — officials see only data relevant to their LGU and role
• No third-party advertising networks or tracking scripts on platform pages
• Security issues: landon@zentarailabs.com — response within 24 hours

8. Cookies

NovaGovAI uses only essential session cookies required for authentication. No advertising cookies, no cross-site tracking, no analytics beacons. Disabling cookies will prevent login.

9. Changes to This Policy

Material changes to this policy will be communicated to active LGU administrators by email at least 14 days before they take effect. The effective date at the top of this page reflects the most recent revision.

Terms of Service

Effective: April 27, 2026  ·  Governing law: Florida, USA (federal claims); Philippine law for data privacy obligations under RA 10173

1. Acceptance

By accessing or using NovaGovAI (novagov.tech) or any associated services, you agree to these Terms. If you are using NovaGovAI on behalf of a Local Government Unit, you represent that you have authority to bind that LGU to these Terms.

2. Authorized Use

NovaGovAI is designed for use by authorized Philippine Local Government Unit officials and staff. You agree to:

• Use the platform only for lawful government operational purposes
• Keep your account credentials confidential and not share login access
• Not attempt to access data belonging to other LGUs
• Not use the platform to process data for which you do not have lawful authority
• Report suspected security issues to landon@zentarailabs.com promptly

3. AI Outputs Are Advisory Only

4. Data Ownership

All data you input into NovaGovAI — LGU records, citizen reports, planning data — remains the property of your Local Government Unit. Zentarai Labs claims no ownership over LGU data. We process it only as necessary to deliver the services you have requested.

5. Service Availability

• Zentarai Managed deployments: 99% uptime target measured monthly. Scheduled maintenance notified 48 hours in advance.
• Self-hosted / DICT GovCloud: Uptime is determined by the LGU's or DICT's own infrastructure. Zentarai Labs provides software support, not infrastructure guarantees.
• We reserve the right to perform emergency maintenance without advance notice when required for security.

6. Limitation of Liability

To the maximum extent permitted by applicable law, Zentarai Labs shall not be liable for:

• Decisions made by LGU officials based on AI outputs
• Losses arising from service interruptions outside our reasonable control (force majeure, third-party outages, natural disasters)
• Indirect, incidental, or consequential damages of any kind

Our total aggregate liability for any claim arising out of these Terms shall not exceed the total fees paid by your LGU in the 12 months preceding the claim. For free-tier (Founding Partner Year 1) accounts, aggregate liability is limited to USD $500.

7. Intellectual Property

The NovaGovAI platform, including its software, design, AI prompt architecture, and documentation, is the intellectual property of LFGTTM LLC (Zentarai Labs). You receive a limited, non-exclusive, non-transferable license to use the platform for your LGU's operational purposes during the term of your agreement.

Founding Partners who receive source code access under a Non-Disclosure Agreement are bound by the terms of that separate NDA.

8. Termination

Either party may terminate service with 30 days written notice. On termination of Zentarai Managed deployments, we will deliver a full data export in open formats within 14 days at no charge. Zentarai Labs may suspend service immediately and without notice for material breach (unauthorized access, illegal use, non-payment after the free period).

9. Governing Law

These Terms are governed by the laws of the State of Florida, USA, except that Philippine law governs all data privacy obligations arising under the Data Privacy Act of 2012 (RA 10173). Disputes will first be subject to good-faith negotiation for 30 days before any formal proceedings.

10. Changes to These Terms

We will notify active LGU administrators of material changes by email at least 30 days before they take effect. Continued use of the platform after the effective date constitutes acceptance of the revised Terms.

Contact & Data Protection Officer

For privacy requests, data subject rights, or legal inquiries:

LFGTTM LLC is registered in Florida, USA. NovaGovAI operates exclusively in support of Philippine Local Government Units and complies with the Data Privacy Act of 2012 (RA 10173), RA 12254 (CLUP), RA 10121 (DRRM), and RA 11032 (EODB) in the scope of services provided.