Privacy

Privacy policy

Last updated 16 October 2026

This policy explains what personal data Edison WS Oy collects in connection with Edison Nova, why we collect it, who can see it and how you can have it removed. It covers both the early-access list and the invitation-only Nova pilot.

Who we are

Edison Nova is provided by Edison WS Oy, which is the controller of your personal data. Business ID 3470364-4, Kehruutie 1 / LH1, 00410 Helsinki, Finland. For privacy questions, contact privacy@edison.ws.

Early-access list

When you register your interest by email, we receive your email address and anything you choose to include, such as your name and website. We use it only to manage the early-access list and to contact you about Nova. You can leave the list at any time by writing to website@edison.ws. We keep your details until you ask to be removed, and delete them at the latest 24 months after your last contact with us.

What we store during the pilot

You sign in with your Edison account. Nova passes your password to Edison's account service to check it; Nova doesn't store the password or write it to logs.

What Nova sends to AI

When you ask Nova to build or change something, the text of your request and the content of the relevant pages are sent to Anthropic (the provider of the Claude AI models) through its commercial API.

• Images: pictures you explicitly attach to a request as visual references are sent to the AI as resized copies. Images in your project's image library are not sent; the AI only sees their IDs, file names, sizes and the descriptions you wrote.
• Model training: under Anthropic's Commercial Terms (effective 17 June 2025), Anthropic may not train its models on customer content.
• Retention at Anthropic: API inputs and outputs are deleted within 30 days, except content flagged under Anthropic's Usage Policy (kept up to 2 years) or where the law requires longer retention (Anthropic's retention page).
• Location: Anthropic states that data is stored in the US and that traffic may be routed through select countries in the US, Europe, Asia and Australia (Anthropic's page on server locations). Anthropic's Data Processing Addendum applies.
• AI images (only if you use them): when you choose Generate with AI or Regenerate with AI, or when Sample images with AI is on as you start a site (it is on by default; you can switch it off), the short description of the image place (Nova writes it from your site content, or uses the image's alt text or section name; you can change it) and any guidance you type are sent to Google Cloud (Vertex AI, model Nano Banana 2.1). Your own photos and files are not sent. Google offers this model only through its global endpoint, so the request may be processed in any Google Cloud region, including outside the EU. Under the "Training Restriction" in Google's Service Specific Terms, Google does not train its models on this data, and Google's Cloud Data Processing Addendum applies.
  • Retention at Google: Edison has turned off Google's data caching for Nova. Google's automated safety checks scan each request. If they flag it as possible misuse, Google may keep the request for up to 90 days, and authorised Google staff may review it (Google's abuse-monitoring page).
  • The images that come back are labelled “AI” in your image library and in exports, and the image file records that it was AI-generated.
• AI output can be wrong. You approve the changes Nova makes, and nothing is published automatically.

Where the service is hosted

Nova runs on an Edison server in OVHcloud's data centre in Frankfurt, Germany. Nova's daily backups are encrypted on the server before they are moved to OVHcloud storage in Gravelines, France; only Edison holds the encryption key. OVHcloud also takes its own daily snapshots of the whole server in the same data centre and keeps them for 7 days; Edison does not encrypt those snapshots.

Why we use your data

We use your data to manage the early-access list, to contact you about the pilot, to provide and support the Nova service, to keep it secure and to improve it. Under the EU General Data Protection Regulation (GDPR), we rely on these legal bases:

• Early-access list: our legitimate interest in replying to your request and telling you about Nova (Article 6(1)(f)). You can object at any time by asking to be removed.
• Running the pilot for you: the agreement between us under the Nova terms of use (Article 6(1)(b)).
• Security, logs, audit records, backups and improving the service: our legitimate interest in keeping Nova secure, finding faults and making it better (Article 6(1)(f)).
• Records the law requires us to keep: our legal obligations (Article 6(1)(c)).

How long we keep it

At the end of the pilot we delete all pilot data unless agreed otherwise. The end date hasn't been set yet; we'll tell pilot users in good time.

Asking for deletion

Email support@edison.ws from the address your invitation was sent to. Say whether you want your projects, images, feedback or everything removed.

• Access: if you ask us to remove you, your access to Nova ends immediately.
• Projects and images: we remove them from the server by hand within 30 days of your request.
• Backups: your data disappears from backups within 50 days of your request.
• We confirm in writing when each step is done.

Feedback and diagnostics

The Send feedback button in Nova sends the message you write plus the details shown in the form. You can remove the screenshot before sending. Separately, Nova reports technical errors automatically (error type, page and request ID, no content).

Your rights

You can ask to see, correct or delete your personal data, object to its use, or leave the early-access list at any time. You also have the right to lodge a complaint with the Finnish data protection authority (Office of the Data Protection Ombudsman).

Contact

Privacy questions and requests about your rights: privacy@edison.ws. Pilot support and deletion requests: support@edison.ws.