Privacy Policy

1. Information We Collect

In order to evaluate repayment programs, track PSLF forgiveness, and compile court-admissible bankruptcy ledgers, we collect the following categories of information:

• Federal Student Aid (NSLDS) Records: When you upload your MyStudentData.txt file from StudentAid.gov, our engine parses loan types (Direct, FFEL, Perkins), outstanding balances, interest rates, loan servicer names, disbursement dates, repayment statuses, and cumulative payment histories.
• Financial & Household Information: Adjusted Gross Income (AGI), federal tax filing status, household size, and state of residence required to calculate income percentage guidelines under federal poverty standards.
• Official Form Identifiers: Full name, contact information, date of birth, and the last 4 digits of your Social Security Number (SSN) provided to pre-fill official Department of Education application documents (OMB No. 1845-0102 / 1845-0007).
• Law Firm Practice Information: Firm name, managing attorney credentials, state bar numbers, practice logo images, and attorney-client case roster data.
• Payment Data: Payment transactions are processed directly by our third-party payment processor (Stripe, Inc.). Nova Satus never receives or stores your full credit card number or bank credentials.

2. How We Use Your Information

Your data is used solely to provide and support our software services, specifically:

• Running mathematical simulations across IDR plans (SAVE, IBR, PAYE, ICR);
• Calculating Public Service Loan Forgiveness (PSLF) qualifying payment tracking;
• Formatting Brunner Good-Faith Payment Ledgers and DOJ/ED Bankruptcy Attestation schedules for 11 U.S.C. § 523(a)(8) court filings;
• Transmitting requested applications via digital e-fax to official servicer intake centers;
• Tracking annual income recertification deadlines and sending timely notification reminders; and
• Managing your account, billing, and technical support inquiries.

3. Data Security & Technical Safeguards

We maintain rigorous administrative, technical, and physical safeguards designed to protect sensitive student loan and financial data in accordance with standards established under the Gramm-Leach-Bliley Act (GLBA) Safeguards Rule:

• Encryption in Transit: All communication between your browser and our servers is secured using modern Transport Layer Security (TLS 1.3) with HSTS enforcement.
• Encryption at Rest: All stored borrower files and database records are encrypted at rest using AES-256 standard encryption.
• In-Memory Parsing: Uploaded student data text files are parsed in isolated application memory. Raw files are not retained beyond the session unless explicitly saved to your persistent profile.
• Role-Based Access Control: Administrative access is strictly limited to authorized engineering personnel using multi-factor authentication.

4. Compliance with Virginia Consumer Data Protection Act (VCDPA)

Nova Satus LLC is organized under the laws of the Commonwealth of Virginia. Under the Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.), consumers (which we extend to all users across the United States) have the following rights:

• Right to Access: You have the right to confirm whether we process your personal data and to access that data.
• Right to Correct: You have the right to correct inaccuracies in your personal data.
• Right to Delete: You have the right to request deletion of personal data provided by or obtained about you.
• Right to Data Portability: You have the right to obtain a portable copy of your personal data in a readily usable format.
• Right to Opt-Out of Sale / Targeted Advertising: Because Nova Satus never sells personal data or engages in cross-context behavioral targeted advertising, your data is already fully protected from third-party monetization.

To exercise any of these rights, simply email our Privacy Officer at matt.branson@novasatus.life or call (434) 333-5528. We respond to all verified consumer requests within forty-five (45) days.

5. Student Aid Records & FERPA Considerations

While Nova Satus is not an educational institution subject to direct Family Educational Rights and Privacy Act (FERPA) regulations, we treat all Federal Student Aid histories and academic loan records with the same degree of heightened privacy and confidentiality required by federal educational standards.

6. Third-Party Service Providers

We share data only with trusted third-party service providers acting on our instructions to perform infrastructure functions:

• Stripe, Inc.: Processes credit card payments and law firm subscription billing under PCI-DSS Level 1 certification.
• Certified Telephony / Digital Fax Gateways: Transmits user-requested application documents directly to official servicer toll-free fax receiving hardware.
• Secure Cloud Hosting: Cloud infrastructure and content delivery network providers operating ISO 27001 and SOC 2 certified data centers.

7. Data Retention & Permanent Deletion

We retain your personal data and uploaded loan histories only as long as your account remains active or as necessary to provide evaluation and recertification services. You may delete your borrower profile or request complete account erasure at any time. Upon receiving an account deletion request, your loan histories, financial disclosures, and generated exhibits will be permanently purged from active production databases within thirty (30) days.

8. Cookies & Tracking Technologies

Nova Satus utilizes only strictly necessary first-party session cookies required for user authentication, security verification, and session state. We do NOT use third-party tracking pixels, advertising cookies, or behavioral surveillance trackers.

9. Contact the Privacy Office

If you have questions or concerns regarding this Privacy Policy or our financial data practices, contact: