Privacy Policy

This Privacy Policy explains how Supremenova Ltd. ("Supremenova", "Asovera", "we", "us", or "our") collects, uses, shares, protects, and retains personal data when you visit the Asovera website, contact us, purchase or use an Asovera plan, receive support, or interact with our licensing and update services.

Asovera is a product of Supremenova Ltd., a company registered in Nigeria with CAC number 8747386. Our registered office is 6 Grace Street, El-Salem Estate, Abuja, FCT, Nigeria.

This policy applies to people in Nigeria and Kenya and to other visitors or customers where applicable law applies. It should be read together with our Terms of Use and Cookie Policy.

Supremenova generally acts as a data controller when we decide how and why to use information relating to website visitors, prospective customers, Asovera customers, licence holders, and support contacts.

For Asovera Complete stores, the merchant generally decides why its own customers’ personal data is collected and used. The merchant is therefore generally the controller of that store-customer data, while Supremenova processes it on the merchant’s behalf to provide managed hosting, backups, maintenance, security, and support. In limited circumstances, we may act as an independent controller where we must process information for our own security, billing, legal-compliance, or service-administration purposes.

Depending on how you interact with Asovera, we may collect:

• Identity and contact information: your name, business name, email address, telephone number, country, and correspondence.
• Account and commercial information: the plan selected, order details, billing information, payment status, transaction references, invoices, renewal dates, and support entitlement. Complete payment-card details are handled by the relevant payment provider and are not stored by Asovera.
• Enquiry and support information: messages sent through contact forms, email, WhatsApp, social platforms, or support channels, together with files or access details you choose to provide.
• Website and device information: IP address, browser and device type, referring pages, pages requested, timestamps, security events, and similar technical logs. Analytics and advertising technologies may also process online identifiers and information about your interaction with the Asovera website.
• Licence and update information: during activation, the licence key, product and installed version, website URL and domain, a randomly generated installation identifier, and WordPress, PHP, and WooCommerce versions. Subsequent entitlement and update checks use a scoped activation token and record licensing activity such as the last successful check and protected-download count.
• Managed-store information: for Asovera Complete, hosted WordPress and WooCommerce data may include a merchant’s products, content, customers, orders, payment status and references, enquiries, reviews, accounts, logs, and backups.

We may receive information directly from you, from an organization you represent, from an Asovera merchant whose store you use, from the website or software you operate, and from service-provider categories described below.

We process personal data only where we have a lawful basis. Depending on the circumstances, we use it to:

• respond to enquiries and take steps requested before a contract;
• create customer and licence records, process orders, provide plans, and administer manual renewals;
• host, back up, maintain, secure, troubleshoot, and support Asovera Complete stores;
• activate licences, check entitlement, deliver signed software updates, prevent licence abuse, and protect official downloads;
• send service, security, billing, renewal, and support communications;
• send newsletters or marketing messages where you have consented or where another lawful basis permits them, with an available opt-out;
• maintain website security, prevent fraud, enforce our terms, and establish or defend legal claims;
• comply with tax, accounting, consumer-protection, data-protection, and other legal obligations; and
• measure website use, traffic sources, advertising-campaign performance, and interactions with our public marketing website.

Our lawful bases may include performance of a contract, steps taken at your request before a contract, consent, compliance with legal obligations, and legitimate interests that are not overridden by your rights and freedoms.

Asovera’s Theme + Plugin licensing system is an entitlement and secure-update service, not general store analytics. A site owner must enter a licence key and explicitly activate the installation before online entitlement checks begin.

The raw licence key is sent during activation and is not retained on the customer’s WordPress installation. The licensing service stores a protected digest, a short key prefix, and the last four characters. The customer’s site retains a scoped activation token, while the service stores a protected digest of that token. Automatic status checks are normally cached for 12 hours. They may update a last-seen timestamp and send the product slug, installed version, and WordPress, PHP, and WooCommerce compatibility versions.

The licensing client is designed not to transmit products, orders, store-customer information, website content, subscriber lists, administrator details, feature-usage analytics, active-plugin lists, or general error logs.

Asovera Complete stores merchant websites and backups on infrastructure managed by Supremenova. Authorized personnel may access store, customer, order, and payment-status information only where reasonably necessary to provide hosting, maintenance, security, backups, or support, or to comply with law.

We do not routinely inspect merchant customer data or use it for unrelated purposes. Complete payment-card details should be processed by the merchant’s selected payment provider and are not stored by Asovera. The merchant remains responsible for providing its own customers with an appropriate privacy notice, selecting lawful purposes, responding to customer rights requests, and using the store in compliance with applicable law.

The public Asovera marketing website uses analytics and advertising technologies to measure website use and campaign performance. Essential technologies may also be used where required for website administration, security, forms, checkout, or another service you request. See our Cookie Policy for current details and available browser controls.

We do not sell personal data. We may disclose only the information reasonably necessary to categories of recipients that help us operate Asovera, including:

• website-hosting, cloud-infrastructure, backup, and security providers;
• licensing, software-update, and protected-download infrastructure;
• payment-processing and fraud-prevention providers;
• email-delivery, newsletter, communications, and customer-support providers;
• analytics and advertising providers that measure website and campaign activity;
• social-media and messaging platforms when you choose to contact or interact with us through them;
• professional advisers, auditors, insurers, and contractors subject to appropriate duties; and
• courts, regulators, law-enforcement bodies, or other persons where disclosure is required or permitted by law.

Our service providers may process information only for the contracted purpose, under appropriate confidentiality, security, and data-protection obligations. Specific recipients may be disclosed on request or where the law requires us to identify them.

Some infrastructure or service-provider categories may process personal data outside Nigeria or Kenya. Where a cross-border transfer occurs, we will use a lawful transfer basis and appropriate safeguards, which may include contractual protections, an adequacy mechanism, consent where required, or another basis permitted by applicable law.

We assess the purpose, information involved, destination, recipient, and available safeguards before making a relevant transfer. You may contact us for information about the safeguards applicable to your personal data.

We retain personal data only for as long as reasonably necessary for its purpose, our legal obligations, or the establishment, exercise, or defence of legal claims. Our current retention targets are:

• customer accounts, contracts, and licensing records: while active and for six years after termination;
• financial and transaction records: at least six years;
• support records: three years after the matter is closed;
• contact and sales enquiries: 12 months after the last interaction, unless the person becomes a customer;
• newsletter records: until consent is withdrawn, with a minimal suppression record retained to honour the opt-out;
• security and technical logs: normally 90 days, with longer retention for an active security incident;
• active Asovera Complete merchant-store data: for the duration of the managed service;
• terminated merchant-store data: returned or deleted within 30 days, subject to legal obligations and agreed export arrangements; and
• backup copies following termination: removed through the normal backup cycle within 90 days.

Records relevant to a dispute, fraud investigation, regulatory request, or legal obligation may be kept until the matter is resolved. We periodically review retained data and delete, anonymize, or securely isolate information that is no longer required.

We use reasonable administrative, technical, and organizational measures appropriate to the information and risks involved. These may include restricted access, role-based permissions, encryption in transit, protected credentials, backups, signed software releases, security monitoring, and confidentiality obligations.

No online service can guarantee absolute security. Customers must also protect their accounts, use strong unique passwords, limit administrator access, install supported updates, and notify us promptly of suspected compromise.

Subject to applicable law and any valid exception, you may have rights to be informed, request access, correct inaccurate information, request deletion, restrict or object to processing, withdraw consent, receive portable data, and request human review of a solely automated decision that significantly affects you.

To exercise a right, email hello@supremenovar.com. We may request information needed to verify your identity and authority. If the request relates to a merchant’s store, we may direct it to the relevant merchant or assist that merchant in responding.

You may also complain to the Nigeria Data Protection Commission or, where Kenyan data-protection law applies, the Office of the Data Protection Commissioner in Kenya. We encourage you to contact us first so we can try to resolve the concern promptly.

Asovera plans and customer accounts are intended for people aged 18 or older. We do not knowingly invite children to purchase Asovera or submit personal data directly to us. Merchants using Asovera remain responsible for any products, services, or data collection directed to children through their own stores.

We may update this Privacy Policy when our services, providers, legal obligations, or processing practices change. The revised version will show a new last-updated date. Where a change materially affects your rights or how we use personal data, we will provide additional notice where reasonably practicable or legally required.

Privacy questions and rights requests can be sent to hello@supremenovar.com.