Skip to content

Privacy Policy

We sell you the ability to hold your own keys. Collecting more data than that requires would undercut the whole point.

Plain-language draft for design review. NovaSapien’s counsel should confirm the specifics — dollar figures, windows, and jurisdiction — before this page goes live.

What we will never ask for or store

No NovaSapien employee will ever ask for your seed words, passphrase, or private keys — not by email, not on a call, not in a support chat. Anyone who does is not us.

  • Seed phrases, mnemonics, passphrases, or private keys.
  • Wallet PINs or device unlock codes.
  • Extended public keys (xpubs), unless you deliberately share one for a recovery or multisig engagement — and then only for the length of that engagement.
  • Exchange logins or API keys.

What we do collect

  • Order details — name, email, shipping address, what you bought, and any note you added at checkout.
  • Payment confirmation — the last four digits, card brand, and the Stripe transaction reference. Full card numbers never touch our servers.
  • Consult scheduling — the email and time slot you pick, plus whatever you tell us about your situation.
  • Email subscription — your address and the confirmation timestamp, if you opted in to the Sovereign Signal.
  • Basic site analytics — aggregate page views and referrers, without cross-site tracking or advertising profiles.

Payments

Card, Apple Pay, and Google Pay are processed by Stripe. Stripe collects and stores card data under its own privacy terms; we receive only the confirmation and the last four digits. We do not run our own card vault and we do not store card numbers in any form.

Email and the Sovereign Signal

The Sovereign Signal is double opt-in: you enter an address, we send a confirmation, and nothing goes out until you click it. Every message carries a one-click unsubscribe. We do not sell, rent, trade, or co-market the list, and we do not use it to retarget you with ads.

Who else touches your data

  • Stripe — payment processing.
  • Shipping carriers — name and address only, on the parcel and label.
  • Our email provider — for receipts, scheduling, and the newsletter.
  • Law enforcement — only under a valid, specific legal order, and only what that order compels.

That is the whole list. We do not share order data with data brokers, ad networks, or Bitcoin analytics firms.

How long we keep things

  • Order and tax records: seven years, as US tax law requires.
  • Consult notes: two years, then deleted.
  • Recovery engagement material (including any xpub you shared): deleted within 30 days of the engagement closing, unless you ask us to keep it longer in writing.
  • Newsletter subscription: until you unsubscribe.

Your rights

Colorado residents have rights under the Colorado Privacy Act, including access, correction, deletion, and data portability. Residents of other states and countries may have equivalent rights. Email us and we will honor the request within 45 days — we will not make you fill out a form to get your own data back.

Children

NovaSapien does not sell to anyone under 18 and does not knowingly collect data from children. If a parent teaching a minor wants to sit in on a consult, that is welcome — the account stays in the adult’s name.

Changes and contact

If this policy changes materially, we date the change at the top of this page and email anyone on the Signal list. Questions, requests, or corrections: contact us or write to NovaSapien, 2525 Arapahoe Ave Ste E4 #1004, Boulder, CO 80302.

Ask us about this pageRead the Terms