How Nova Works
Nova is LLYVerse’s multi-assistant workspace featuring three built-in personas — Nova (CEO & Architect), Astra (Wonder & Synthesis), and Astaria (Analyst & Logic). This page explains in plain words what Nova can and cannot do, how your data is stored, and how you stay in control.
1. What Nova Can & Cannot Do
- Maintain separate, persistent conversations per assistant (Nova, Astra, Astaria) and multi-agent Council rooms for signed-in members.
- Render formatted Markdown, code blocks, math formulas (KaTeX), and diagrams (Mermaid in strict sandboxed mode) using self-hosted vendor libraries.
- Remember facts you explicitly ask her to remember, and run scheduled routines on your behalf when enabled.
- Nova cannot run commands, overwrite or delete files, transfer Sparks or Flames, send emails, or write to databases without your explicit in-app confirmation.
- Nova never reads or logs raw passwords, API keys, or tokens entered into Secure Forms — those go straight into an AES-256-GCM encrypted vault.
- Nova cannot override the global Stop Nova kill switch.
2. How Approvals & the Stop Switch Work
Before Nova takes any sensitive action (running a workspace command, modifying/deleting a file, transferring Sparks or Flames, making a payment, sending an outbound message, or writing to a database), she presents a Danger Approval Card showing the exact action details.
- Two-Click Human Confirmation: Danger actions require two deliberate clicks by a signed-in human user. Automated routines and background jobs can never self-approve.
- Single-Use 5-Minute Tokens: Confirming an action mints a single-use token bound to the SHA-256 hash of the exact action payload. Tokens expire after 5 minutes and cannot be reused or replayed.
- Stop Nova Kill Switch: Clicking Stop Nova in the sidebar or info pane immediately cancels running tasks, closes live streams, revokes open approval tokens, and pauses scheduled routines.
3. What Is Stored & For How Long
| Data Type | Where It Lives | Retention & Control |
|---|---|---|
| Signed-In Chats & Threads | Account SQLite database | Kept until you delete the conversation or account. |
| Visible Memories | Memory Vault (per-persona or shared) | Editable and deletable anytime; "Forget everything" erases all memories immediately. |
| Scheduled Routines | Account routines table | Kept until you pause or delete the routine. |
| Activity Log (nova_actions) | Append-only audit table | Records tool calls, approvals, memory writes, and routine runs with all secrets redacted. |
| Encrypted Nightly Backups | AES-256-GCM archive outside web root | Retained for 14 days, then automatically pruned. Deleted data ages out within 14 days. |
| Guest Widget Chats | Browser tab session only (sessionStorage) |
Cleared as soon as you close the browser tab (can be imported once if you sign in). |
4. Guest Widget Limits
Visitors who are not signed in can try Nova using the floating widget on public pages. The full workspace (/novaai and /app) requires signing in.
- Nova Persona Only: Guests chat with Nova only (no Astra, Astaria, or multi-agent rooms).
- Text Only: File uploads, attachments, voice memos, and secure forms are disabled for guests.
- No Tools or Computer Access: Guest conversations run with all MCP connectors, tools, memory, routines, and computer actions turned off.
- Rate & Length Caps: Limited to 10 messages per 10 minutes and 30 messages per day per IP address, with replies capped at approximately 500 tokens.
5. How to Export or Delete Your Data
- Memory Vault: Open the Info Pane → Memory → Manage (or Settings → Memory & Encrypted Backups) to search, edit, or delete individual memories.
- Export JSON: Click Export JSON in the Memory Vault to download a complete copy of your saved memories.
- Forget Everything: Click Forget Everything (two-click confirmation) to immediately delete all saved memories for your account. Deleted items age out of encrypted backups within 14 days.
- Delete Conversations: Right-click (or long-press on mobile) any conversation in the sidebar and choose Delete.
Questions or Bug Reports?
Reach out through the LLYVerse support & bug report form or review our full Privacy Policy.