TRANSPARENCY · PRIVACY · SECURITY

Trust starts with understanding what a platform does.

HubNova combines automation with least privilege, clear data purposes, and human control. No absolute guarantees—only reviewable boundaries.

✓
✓encryption In Transit✓secrets Encrypted At Rest✓tenant Isolation✓csrf Protection✓server Side Authorization✓audit Logging✓human Approval For High Impact Actions
LEAST PRIVILEGE

Discord permissions

Why a permission may be required—and why unnecessary access should remain disabled.

View Channels

Show configuration, previews, and delivery health.

Send Messages / Embeds

Publish only to channels explicitly selected by a server manager.

Manage Roles

Only for configured onboarding, verification, and reward roles; Discord role hierarchy remains authoritative.

View Audit Log

Correlate security signals with accountable configuration history.

Manage Channels

Only for tickets, temporary channels, and explicitly confirmed lockdown or recovery actions.

PURPOSE LIMITATION

Data & retention

Account and Discord identity

Sign in, authorize access, and verify access to managed servers.

Until account deletion or session expiry, depending on the data.
Server configuration

Operate modules and isolate settings per Discord server.

Until the configuration or server connection is removed.
Audit and security data

Investigate abuse, account for changes, and support recovery.

90 days by default; module or plan limits may differ.
Aggregated usage signals

Measure community health without analyzing message content.

Configurable and plan-limited; minimal and temporary by default.
Payments and subscriptions

Manage plans, credits, and billing status.

In line with statutory accounting obligations; card data remains with the payment provider.
HUMAN IN CONTROL

Fixed AI boundaries

Nomessage Content By DefaultNoautonomous Discord ActionsNoprovider StorageYeshuman Review RequiredYesusage Metered
COMMUNITY OS

Operational capability map

Foundation · live

NovaStart

Read-only server analysis, migration insight, and temporary observation without Discord actions.

Safety · live

NovaShield

Risk signals, incidents, proportionate response, and human review.

Continuity · live

NovaVault

Version control, preflight checks, drift detection, and controlled recovery with a rollback path.

Automation · live

NovaFlow

Safe workflows with signed webhooks, conditions, and execution history.

Onboarding · live

NovaWelcome

Guided onboarding, verification, roles, forms, and measurable activation.

Operations · live

NovaSupport

Protected intake, routing, SLA tracking, case records, and transparent follow-up.

Intelligence · live

NovaPulse

Privacy-aware activity, retention, support load, anomalies, and experiments.

Engagement · live

NovaArcade

Interactive sessions, game nights, progression, and rewards with plan and safety limits.

Community · live

NovaEvents

Events, RSVP, waitlists, reminders, attendance, and transparent feedback.

Integrations · live

NovaConnect

OAuth where available, encrypted platform secrets, and controlled provider connections.

Assistance · live

NovaAI

Drafts and analyses with credits, usage insight, and mandatory human control.

Voice & Media · live

NovaRadio / NovaStudio

DAVE-encrypted voice broadcasts with explicit source and licence controls, manual start and immediate emergency stop.

Community Network · live

NovaNetwork

Voluntary community discovery with minimal profiles, mutual connections, reporting and blocking.

Developer Platform · live

NovaDev

Revocable API keys with scopes, sandboxing, per-app rate limits and usage records.

Governance · live

Trust Center

Permissions, data use, retention, incident policy, and platform status in clear language.