NevoPrivacy Policy
Effective 1 November 2026
This policy explains what personal data the LLMAPI team ("we") processes when you use Nevo, why, who else processes it, how long we keep it, and the rights you have. We are the data controller for this processing. Contact: andrew@llmapi.ai.
1. What we process
- Prompts and answers. The messages you send and the answers are processed to answer you and are not stored on our servers. Your chats are saved only in your browser on this device; Temporary chats are not saved anywhere.
- Attachments. Images and files you attach. Images are sent to the model to answer your question; files are read in memory to extract their text. Attachments are not stored on our servers; they stay with the chat in your browser.
- Account data. Your email address, sign-in method and plan. Settings, custom instructions and memory facts stay in your browser on this device; instructions and memory travel with each message only to answer it.
- Usage records. For each answer: your account or anonymous identifier, the tier and model used, token counts, cost and latency. We use these to enforce quotas, bill Plus and run the service.
- Technical data. IP address, browser type, device type, timestamps and error reports. Used for security (rate limiting, abuse prevention), debugging and uptime.
- Feedback and reports. Thumbs up / down, reports you submit about an answer, and support emails you send us.
2. Why we process it (legal bases)
- To provide the service you asked for (contract): answering prompts, billing Plus.
- Our legitimate interests: keeping the service secure and available, preventing abuse, fixing errors, understanding aggregate usage.
- Legal obligations: tax and accounting records for payments.
- Consent: analytics cookies (only after you accept the banner) and optional features such as memory. You can withdraw consent at any time.
3. Who processes it for us
We use these processors under data processing agreements. None of them is allowed to use your data for their own purposes.
| Processor | Purpose | Data | Location |
|---|---|---|---|
| LLMAPI | Routes prompts to the AI model providers that generate the answers | Prompt text, conversation context, image attachments | EU / US (provider dependent); no training on your data |
| Fly.io | Hosting: application servers and the database | All service data, request logs (IP address, user agent) | Frankfurt, Germany (EU) |
| Stripe | Payments and the billing portal for Plus | Email, payment card (held by Stripe, never by us), billing address, invoices | EU / US under Stripe's data processing terms |
| Resend | Transactional email (sign-in links, receipts) | Email address, email content | US (EU-US Data Privacy Framework) |
| Sign in with Google (optional) | Google account email and basic profile, as you authorise | Per Google's privacy policy | |
| Sentry | Error tracking | Error messages, stack traces, request path, browser version; no prompt text | EU region |
Where data leaves the EU/EEA we rely on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. We do not sell personal data and we do not use your conversations to train AI models.
4. Cookies and local storage
Nevo uses strictly necessary storage to keep you signed in, remember your theme and sidebar state, and record your cookie choice. Analytics are off until you click "Accept" on the cookie banner; if you reject, no analytics script is loaded. You can change your choice by clearing the site data in your browser.
5. How long we keep data
- Chats and attachments: we do not keep them on our servers. They stay in your browser until you delete them (Settings > Data controls) or clear your browser data.
- Temporary chats: not saved anywhere, not even in your browser.
- Account data: for the life of the account, then deleted within 30 days of account deletion.
- Usage records: 24 months, then aggregated.
- Request logs and error reports: 30 days.
- Billing records: 10 years where tax law requires it.
- Model providers: LLMAPI's providers may hold prompts for up to 30 days for abuse monitoring, then delete them.
6. Your rights
If you are in the EU/EEA, UK or Switzerland you have the right to access your data, correct it, delete it, restrict or object to processing, receive a copy in a portable format, and withdraw consent. You can export and delete your chats yourself in Settings > Data controls, and delete your account in Settings > Account. For anything else, email andrew@llmapi.ai; we answer within one month. You can also complain to your local data protection authority. Residents of other places (including California) have equivalent rights where their law grants them.
7. Children
Nevo is not intended for children under 16. If you believe a child has given us personal data, contact us and we will delete it.
8. Security
Data is encrypted in transit (TLS) and at rest. Access to production systems is limited to the people who operate the service and is logged. Payment card data never touches our servers. If a breach is likely to affect your rights we will notify you and the supervisory authority as the law requires.
9. Changes
We will post any changes here and update the effective date. For material changes we also notify you by email or in the app.
See also the Terms of Service.