Privacy Notice
Last updated: May 24, 2026
1. Who we are
EnduraGroup LLC ("Rova", "we", "us") operates the Rova website, applications, and related services (the "Service"). EnduraGroup LLC acts as the data controller for personal data we collect about you through the Service.
2. Personal data we collect
- Account data — name, email address, password (hashed), and login credentials.
- Profile and subscription data — plan tier, billing status, preferences.
- Usage and telemetry — pages viewed, features used, searches, AI interactions, timestamps.
- Device and technical data — IP address, browser type, device identifiers, operating system.
- Support and communications — messages you send to us, survey responses.
- Content you submit — properties saved, portfolio data, notes, and prompts you provide.
Payment card details are collected and processed by our payment provider Paddle, not by us.
3. How we use personal data
- To create and manage your account (contract performance).
- To provide, operate, and improve the Service (contract performance / legitimate interests).
- To detect, prevent, and respond to fraud, abuse, and security incidents (legitimate interests).
- To process payments, manage subscriptions, and handle invoices via Paddle (contract performance / legal obligation).
- To respond to support requests and communicate service updates (contract performance / legitimate interests).
- To send product news and marketing where permitted (consent, which you can withdraw at any time).
- To comply with legal obligations and enforce our terms (legal obligation / legitimate interests).
4. How we share personal data
We share personal data only with these categories of recipients:
- Service providers and subprocessors — hosting, database, email delivery, analytics, and customer support tooling, under contract.
- Paddle (Merchant of Record) — for sale of the product, subscription management, payments, tax compliance, refunds, and invoicing.
- Professional advisers — legal, accounting, and audit advisers, where reasonably required.
- Authorities — where required by law, court order, or to protect our rights or others' safety.
- Successors — in connection with a merger, acquisition, or asset sale, subject to confidentiality.
We do not sell your personal data.
5. International transfers
Personal data may be processed in the United States and other countries where we or our service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Data retention
We keep personal data for as long as your account is active and as needed to provide the Service. After account closure, we retain data only as long as necessary for legal, tax, accounting, or legitimate business purposes, after which it is deleted or anonymized.
7. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your data;
- restrict or object to certain processing;
- request portability of data you provided;
- withdraw consent at any time (without affecting prior processing);
- lodge a complaint with your supervisory authority.
To exercise any of these rights, contact us at privacy@rova.market. We will respond within one month, or as required by applicable law.
8. Security
We implement appropriate technical and organizational measures — including encryption in transit, access controls, and least-privilege principles — to protect personal data against unauthorized access, alteration, disclosure, or destruction. No system is 100% secure, but we work to maintain a high standard of protection.
9. Cookies
We use essential cookies to operate the Service (for example, to keep you logged in), and we may use limited analytics cookies to understand how the Service is used. You can manage cookies in your browser settings; disabling essential cookies may break parts of the Service.
10. Children
The Service is not directed to children under 16 and we do not knowingly collect their data.
11. Changes
We may update this notice from time to time. Material changes will be communicated through the Service or by email.
12. Contact
EnduraGroup LLC — privacy@rova.market.