Privacy Policy

Effective date: October 6, 2026 · Version 2.0

This Privacy Policy explains how Neev Technologies, Inc. ("NeevAI", "we", "us") collects, uses, shares and protects personal information when you visit our website at neevai.io, contact us, book a call, use an account in the NeevAI portal, or otherwise deal with us. It also explains how we handle personal information that we process on behalf of our business customers through the NeevAI Platform.

If you have questions, contact us at [email protected].

1. Who this policy covers

When NeevAI decides how your information is used. This policy applies when we act as the controller of your personal information: when you browse our website, fill in a form, book a call, chat with the NeevAI agent on our own website, receive our emails, sign in to the NeevAI portal as a user of a customer account, or are a contact at a customer, prospect or supplier.

When NeevAI acts for a customer. Businesses use the NeevAI Platform to put AI agents on their own websites and other channels. When you chat with one of those agents, the business that runs it decides how your information is used, and NeevAI processes it on that business's behalf. Section 7 explains this, and the business's own privacy notice applies.

2. Information we collect

Information you give us. When you fill in a contact or demo form, book a call, or email us, we collect what you provide, such as your name, email address, company, job title and the content of your message.

Portal account information. If you are an Authorized User of a customer's NeevAI portal account, we collect your name, email address and sign-in details. Portal sign-in is handled by Google Firebase Authentication.

Conversations with our own website agent. If you chat with the NeevAI agent on neevai.io, we collect the messages you send and any details you choose to share, so that the agent can answer and so that our team can follow up if you ask us to.

Information collected automatically. When you visit our website, we and our service providers automatically collect technical information such as your IP address, browser and device type, operating system, referring page, pages viewed and the date and time of your visit. We use this to operate and secure the website and to understand how it is used.

Cookies and analytics. We use cookies and similar technologies on our website. We use PostHog and Google Analytics to understand how our website is used, and Cal.com to let you book calls. We do not use advertising or retargeting cookies. You can set your browser to refuse or delete cookies; some parts of the website may then not work as intended.

Sensitive information. We do not ask for sensitive personal information, such as health information, government identification numbers or payment card numbers, through our website or our website agent. Please do not share it with us.

3. How we use information

We use personal information to:

respond to your enquiries, provide demos and arrange calls you request;
provide, operate, support and secure the NeevAI Platform for our customers and their Authorized Users;
send service and administrative messages, such as account notices and changes to our terms;
send marketing emails where the law allows, which you can opt out of at any time using the link in the email or by contacting us;
understand how our website is used and improve it;
detect and prevent fraud, abuse and security incidents; and
comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

4. Legal bases (EEA, UK and Switzerland)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases: contract, where processing is needed to provide a service you or your employer have asked for; legitimate interests, such as responding to business enquiries, securing our website and understanding how it is used, where those interests are not overridden by your rights; consent, where we ask for it, such as for non-essential cookies where required, which you can withdraw at any time; and legal obligation, where the law requires us to process information.

We share personal information only as follows:

Service providers that host, operate and support our website and the NeevAI Platform on our behalf under written contracts, including Amazon Web Services (hosting and database), Microsoft Azure OpenAI Service (AI responses), Google Firebase Authentication (portal sign-in), Cloudflare (DNS, content delivery and the chat widget loader) and Twilio SendGrid (escalation emails, when enabled)., and, for our website only, PostHog and Google Analytics (website analytics) and Cal.com (call scheduling) The full list of subprocessors for customer data is in Annex III of the Data Processing Addendum.
Business transfers, in connection with a merger, acquisition, financing or sale of all or part of our business, subject to confidentiality obligations.
Legal reasons, where we believe disclosure is required by law, regulation or legal process, or is needed to protect the rights, property or safety of NeevAI, our customers or others.
With your consent or at your direction.

6. AI processing

The NeevAI Platform, including the NeevAI agent on our own website, generates AI answers using OpenAI's GPT family of models (GPT-5.1 and newer), accessed through Microsoft Azure OpenAI Service. When you chat with an agent, the conversation and the knowledge base passages relevant to your question are sent to that service to generate a response. After a conversation, the same service is used to summarize it and score its intent, sentiment and quality for the customer's analytics dashboard. Content sent to the service is not used to train models, either by NeevAI or by the model provider. Microsoft may retain prompts and responses for up to thirty (30) days solely to monitor for abuse of its service, and does not use them to train models.

AI answers are generated automatically and can be wrong. They are not used to make decisions about you that have legal or similarly significant effects.

7. Data we process on behalf of customers

When a business uses the NeevAI Platform to run an AI agent on its website or other channels, that business is the controller of the conversations and other personal information the agent handles, and NeevAI acts as its processor or service provider under our Data Processing Addendum. In that role we process the information only to provide the service to that business and on its instructions, we do not use it for our own marketing, and we do not use it to train AI models.

If you chatted with an AI agent on another company's website, please read that company's privacy notice to understand how your information is used, and send any request to access, correct or delete your information to that company. If you contact us instead, we will pass your request to the company concerned.

8. Where information is stored

The NeevAI Platform is hosted on Amazon Web Services in the United States (us-west-2), with its database on Amazon RDS for PostgreSQL in the same region. Some of our service providers process information in other locations, as listed in Annex III of the Data Processing Addendum. If you are outside the United States, your information will be transferred to and processed in the United States. Where the law requires it, we protect such transfers with appropriate safeguards, such as the European Commission's standard contractual clauses.

9. How long we keep information

Customer data. Personal information we process on behalf of a customer is kept for the term of that customer's Order and deleted within thirty (30) days after it ends, unless the Order states a different period or the law requires longer retention, as described in the Data Processing Addendum. Customers can also delete data earlier.

Website and contact information. We keep personal information we hold for our own purposes only as long as necessary for the purposes in this policy, unless a longer period is required or permitted by law (such as for tax, accounting or other legal requirements). No purpose in this policy requires us to keep it for longer than six (6) months after an account becomes idle. When we no longer need it, we delete or anonymize it, or, where that is not possible (for example, because it is in backup archives), we store it securely and isolate it from further processing until deletion is possible.

10. How we protect information

We use technical and organizational measures designed to protect personal information. Our public endpoints use HTTPS with TLS, and credentials that customers provide for connectors are encrypted with AES-GCM before they are stored. The measures that apply to customer data are described in Annex II of the Data Processing Addendum. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children

Our website and services are intended for businesses and are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has given us personal information, contact us and we will delete it.

12. Your rights

Depending on where you live, you may have the right to: know whether we process your personal information and access a copy of it; correct inaccurate information; delete your information; receive your information in a portable format; object to or restrict certain processing; withdraw consent where we rely on it; opt out of marketing; and opt out of the sale or sharing of personal information or targeted advertising (we do not sell or share personal information for those purposes). We will not discriminate against you for exercising your rights.

To exercise your rights, email [email protected]. We will verify your request before acting on it, and you may use an authorized agent where the law allows. If we decline your request, you may appeal by replying to our decision, and if your appeal is denied you may contact your state attorney general or your local data protection authority. If you are in the EEA, the UK or Switzerland, you may complain to your data protection authority.

For information we process on behalf of a customer, please contact that customer, as described in Section 7.

Do Not Track. There is no common standard for Do Not Track browser signals, so our website does not currently respond to them.

13. Changes to this policy

We may update this Privacy Policy from time to time. Each version shows its effective date and version number at the top of this page. If we make material changes, we will post a notice on our website and, where appropriate, notify you directly. Changes to how we process customer data on a customer's behalf are governed by the Data Processing Addendum.

14. Contact us

Neev Technologies, Inc., 262 Chapman Rd, Ste 240, Newark, Delaware 19702. Email: [email protected].