Privacy Policy
Privacy Policy
Effective: April 27, 2026 · Applies to: novagov.tech, zentarailabs.com, and all NovaGovAI services
Philippine compliance: This policy is written to comply with the Data Privacy Act of 2012 (RA 10173) and its implementing rules and regulations. Zentarai Labs is committed to responsible data handling in all engagements with Philippine Local Government Units.
1. Data Controller
The data controller for all NovaGovAI services is:
For self-hosted and DICT GovCloud deployments, the Local Government Unit is the data controller for all citizen and operational data stored on their own infrastructure. Zentarai Labs has no access to that data and acts only as a software provider.
2. What Data We Collect
Platform users (LGU officials)
- Email address and name (for account creation and authentication)
- Session activity logs (page access, timestamps — for security auditing)
- AI Query Console inputs: the text of questions submitted to the AI assistant
Citizen users (novagov.tech super app)
- Reports submitted through the citizen portal (description, location, photos if attached)
- Welfare screening responses (if the citizen voluntarily submits them)
- Device type and browser version (for compatibility — not linked to identity)
What we do NOT collect
- Government-issued ID numbers (SSS, PhilHealth, TIN, UMID)
- Financial account details
- Biometric data
- Location data beyond what a citizen explicitly provides in a report
3. How We Use Data
- To authenticate users and maintain secure sessions
- To deliver AI-assisted analysis and compliance reports to authorized LGU officials
- To route citizen reports to the appropriate LGU department
- To generate anonymized usage statistics for platform improvement
- To respond to support and security inquiries
We do not sell, rent, or share personal data with advertisers or data brokers. Ever.
4. Third-Party AI Processing (Anthropic)
The AI Query Console sends query text to
Anthropic (a US-based AI safety company) for processing.
What is sent: the text of the official's question, plus relevant context from public data sources (PHIVOLCS feeds, PAGASA advisories, SGLG scores, CLUP records).
What is never sent: citizen names, addresses, report content, staff personal data, or any LGU database records. AI features can be
fully disabled for deployments with strict data isolation requirements — all other platform functionality remains available. Anthropic's data handling policy:
anthropic.com/privacy
5. Data Retention
- Session data: 30 days from last activity
- AI query logs: 90 days, then permanently deleted
- Citizen reports: Retained for the duration of the LGU's service agreement, then deleted or exported per the LGU's instruction
- Account data: Deleted within 30 days of account closure request
On service termination, Zentarai Managed deployment data is exported in open formats (PostgreSQL dump, CSV) and delivered within 14 days. No proprietary lock-in.
6. Data Subject Rights (RA 10173)
Under the Data Privacy Act, Philippine residents have the right to:
- Be informed — what data we hold about you (this document)
- Access — request a copy of your personal data
- Correction — request correction of inaccurate data
- Erasure — request deletion of your personal data, subject to legal retention requirements
- Object — object to processing of your personal data
- Data portability — receive your data in a structured, machine-readable format
To exercise these rights, contact: landon@zentarailabs.com. We respond within 15 business days.
7. Security
- All connections encrypted with HTTPS/TLS 1.3
- Passwords stored as SHA-256 hashes — never in plaintext
- Role-based access control — officials see only data relevant to their LGU and role
- No third-party advertising networks or tracking scripts on platform pages
- Security issues: landon@zentarailabs.com — response within 24 hours
8. Cookies
NovaGovAI uses only essential session cookies required for authentication. No advertising cookies, no cross-site tracking, no analytics beacons. Disabling cookies will prevent login.
9. Changes to This Policy
Material changes to this policy will be communicated to active LGU administrators by email at least 14 days before they take effect. The effective date at the top of this page reflects the most recent revision.
Terms of Service
Terms of Service
Effective: April 27, 2026 · Governing law: Florida, USA (federal claims); Philippine law for data privacy obligations under RA 10173
1. Acceptance
By accessing or using NovaGovAI (novagov.tech) or any associated services, you agree to these Terms. If you are using NovaGovAI on behalf of a Local Government Unit, you represent that you have authority to bind that LGU to these Terms.
2. Authorized Use
NovaGovAI is designed for use by authorized Philippine Local Government Unit officials and staff. You agree to:
- Use the platform only for lawful government operational purposes
- Keep your account credentials confidential and not share login access
- Not attempt to access data belonging to other LGUs
- Not use the platform to process data for which you do not have lawful authority
- Report suspected security issues to landon@zentarailabs.com promptly
3. AI Outputs Are Advisory Only
Important: AI-generated outputs, recommendations, reports, and analyses produced by NovaGovAI are informational tools only. They do not constitute official government decisions, legal advice, engineering assessments, or certified planning documents. Every output requires review and approval by a qualified government official before any action is taken. The official — not the AI — bears responsibility for official decisions.
4. Data Ownership
All data you input into NovaGovAI — LGU records, citizen reports, planning data — remains the property of your Local Government Unit. Zentarai Labs claims no ownership over LGU data. We process it only as necessary to deliver the services you have requested.
5. Service Availability
- Zentarai Managed deployments: 99% uptime target measured monthly. Scheduled maintenance notified 48 hours in advance.
- Self-hosted / DICT GovCloud: Uptime is determined by the LGU's or DICT's own infrastructure. Zentarai Labs provides software support, not infrastructure guarantees.
- We reserve the right to perform emergency maintenance without advance notice when required for security.
6. Limitation of Liability
To the maximum extent permitted by applicable law, Zentarai Labs shall not be liable for:
- Decisions made by LGU officials based on AI outputs
- Losses arising from service interruptions outside our reasonable control (force majeure, third-party outages, natural disasters)
- Indirect, incidental, or consequential damages of any kind
Our total aggregate liability for any claim arising out of these Terms shall not exceed the total fees paid by your LGU in the 12 months preceding the claim. For free-tier (Founding Partner Year 1) accounts, aggregate liability is limited to USD $500.
7. Intellectual Property
The NovaGovAI platform, including its software, design, AI prompt architecture, and documentation, is the intellectual property of LFGTTM LLC (Zentarai Labs). You receive a limited, non-exclusive, non-transferable license to use the platform for your LGU's operational purposes during the term of your agreement.
Founding Partners who receive source code access under a Non-Disclosure Agreement are bound by the terms of that separate NDA.
8. Termination
Either party may terminate service with 30 days written notice. On termination of Zentarai Managed deployments, we will deliver a full data export in open formats within 14 days at no charge. Zentarai Labs may suspend service immediately and without notice for material breach (unauthorized access, illegal use, non-payment after the free period).
9. Governing Law
These Terms are governed by the laws of the State of Florida, USA, except that Philippine law governs all data privacy obligations arising under the Data Privacy Act of 2012 (RA 10173). Disputes will first be subject to good-faith negotiation for 30 days before any formal proceedings.
10. Changes to These Terms
We will notify active LGU administrators of material changes by email at least 30 days before they take effect. Continued use of the platform after the effective date constitutes acceptance of the revised Terms.