Skip to content
GROWTH DEPT.

Security & trust

Your data, your machine, your rules.

Nova touches your ad budgets, your listings and your customers' data. Here is exactly what she can and can't do, where your data lives, and what happens if you ever leave. Written for a founder, not an engineer.

Every change · Harbor & Pine · today
WhenWhat changedApproved
09:04Meta · Duvet-03 budget $400 → $625/daySarah
09:04Meta · paused 3 ad sets under 1.2×Sarah
10:25Amazon · Queen Sheet Set price $34.99 → $33.79Maya
14:06Meta · 6 new ads live in the testing campaignMaya
16:40Klaviyo · welcome email test B sent to 50%Sarah
5 changes today · 0 without approval · all proposed by Nova, all approved by your teamThis record cannot be edited or deleted. Example.

Nine promises

What we promise every brand we run.

An AI that touches ad budgets and customer data has to earn it. These aren't policies in a drawer; they're how the machine is built.

  • Nothing changes without your approval

    Nova proposes in Slack with before and after. Nothing touches your ads, listings, prices or emails until you tap Approve, or until you've set limits she must stay inside. Approval always comes from someone on your team. Your growth executive reviews; he never approves for you.

  • A record of every change

    Who proposed it, who approved it, what it was before and after, and when. The record can't be edited or deleted, and you get an hourly summary.

  • Your data lives on your machine, in your office

    Every number from every store, marketplace and ad account is kept on the machine we built for you. Not in our cloud. Not on our laptops.

  • Nobody trains on your data

    Nova and Claude run on your own AI subscriptions, under business terms that rule out training. Your customers' names never leave your machine.

  • Claude can read, never change

    When your team asks Claude about the business, it can only look. Changes still go through Nova and your approval.

  • You decide who can ask what

    Finance can see margins; a new hire can't. Anyone not on your list gets no answer at all — not a partial one.

  • Backups you can restore

    Your data is backed up every night and we test a restore every week, so a backup is something that works, not something that exists.

  • Private access only

    Your machine isn't reachable from the public internet. Your team gets in through a private connection; nobody else gets a door to knock on.

  • Everything is yours if you leave

    The machine, Nova, your data, your playbooks and your Slack app stay with you and keep running. We hand over the manual.

How a change happens

Propose. Approve. Go live. On the record.

Every change to your ads, listings, prices or emails takes the same four steps. There is no shortcut, for Nova or for us.

  1. 1 / 4

    Nova proposes

    In Slack, with before and after.

  2. 2 / 4

    You approve

    One tap. Or skip it.

  3. 3 / 4

    It goes live

    Inside the limits you set.

  4. 4 / 4

    It's on the record

    Who, what, when — kept forever.

The details

For your technical person.

Six things they'll want to know, in plain words. Ask to see any of them on the install call.

  • Approval gates on every money-moving action

    Ad budgets, bids, prices, listing edits and customer emails are previewed with old and new values, approved by a named person, and refused if the target changed in between.

  • An append-only change log

    Every approved change writes a record that can't be edited or deleted, and an hourly summary of every change on every ad platform — ours, yours or an agency's — posts to Slack.

  • Customer names never reach the AI

    Nova and Claude only ever see numbers with names, emails and addresses stripped out. The machine enforces that rule itself, not a policy document, and we test it every six hours.

  • Nightly backups with weekly restore tests

    Everything on the machine is backed up every night, encrypted. Once a week a backup is restored and checked, and the recovery steps are written down.

  • No door from the public internet

    Your machine cannot be reached from the open internet. Your team gets in through a private connection with two-step sign-in, and the short list of who can get in is checked and re-applied every time the machine starts.

  • Your own AI subscriptions, no training

    Models run under your own Claude and other AI accounts, on business terms that rule out training. AI spend is passed through at cost. The AI sees the answer to each question, never your whole set of records.

Next step

Meet Nova. Book a 45-minute call.

Bring your store URL and the numbers you already trust. You'll leave with a written plan: what Nova takes on first, what it costs, and when she's in your Slack.