Legal

Privacy Policy

Last updated June 1, 2026.

Overview

This policy explains what data Nessie collects, how we use it, and the controls you have. We collect the minimum needed to provide the service and never sell your data.

Data we process

When you connect a source, we ingest the conversation history you authorize — messages, timestamps, and source metadata. We also store account details such as your email and workspace settings.

How we use it

We use your data solely to ingest, sync, and structure your AI history into context for you, your team, and your agents. We do not use your conversations to train third-party models.

Storage & security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256), scoped per account, and isolated by workspace. Access is logged and limited to least-privilege roles.

Your controls

You can export or permanently delete your data at any time. Deleting a source removes its ingested content from your context graph.

Sub-processors

We rely on a small set of infrastructure and analytics providers under data-processing agreements. A current list is available on request.

Contact

Questions about privacy? Email privacy@nessie.rest and we'll respond promptly.