Privacy Policy

The short version

We store what you save and the minimum needed to run your account. We do not sell your data, run advertising, or track you across other sites. Optional Google Analytics helps us understand how ceevo is used when you allow it; Vercel Web Analytics measures site traffic without analytics cookies.

What we collect

• Account data from the sign-in provider you choose (Google, Apple or GitHub): your name, email address, a profile picture and a provider ID. We never see your password.
• Profile data you enter: username and display name.
• Content you save: links, notes, folder names and descriptions, and the previews (title, description, image address) we fetch from the pages you save.
• Assistant conversations and memory: what you ask Ceevo, its replies, and compact preferences, facts, goals, constraints or decisions that can help in later conversations. You can review and remove saved memories in Settings or in a project’s Memory page.
• Technical data needed to keep the service working and secure: server logs with IP address, browser type and timestamps, kept for a short period.

How we use it

• To run ceevo: show you your folders, sync between your devices, and render public folders you have chosen to share.
• To answer you: we send your question and the relevant conversation, saved-page excerpts or memories to Anthropic’s commercial API. Anthropic says API inputs and outputs are deleted within 30 days by default, subject to the exceptions in its retention policy.
• When you connect an external AI assistant through MCP, it can access only the saves or personal/project memory scopes you approve. The connected assistant receives the content needed to answer your request. Ceevo stores memories you ask it to add or change, but does not copy the external assistant’s full conversation transcript.
• For public web research, when that feature is enabled, we send your search query and selected public page URLs to Browserbase to retrieve or render those pages. Ceevo browser sessions have no signed-in account, saved cookies or payment details; session recordings and logs are disabled. See Browserbase’s privacy policy.
• When you connect Google Calendar, we store your Google account identifier and encrypted OAuth tokens in Supabase and use them only to create a primary-calendar event after you approve its exact details. Ceevo does not add guests or send invitations. Disconnecting removes the stored tokens and requests that Google revoke access; Google processes API requests under its own terms.
• To keep the service safe: prevent abuse, debug problems.
• To contact you about the service, such as important changes. No marketing email unless you opt in.

Our legal basis under the GDPR is performance of a contract (providing the service you signed up for) and legitimate interest (security and reliability). Optional Google Analytics is used only if you consent, and you can withdraw that consent in Privacy settings.

Public folders

When you make a folder public, its name, description, items and your username and display name are visible to anyone with the link and may be indexed by search engines. Everything else remains private. You can make a folder private again at any time.

Where your data lives

Your account data is stored with Supabase in the European Union (Frankfurt). The website is served by Vercel. Anthropic processes the question and limited context needed to answer; when enabled, Browserbase processes public web queries and page content. When you use an MCP connection, the external AI provider you chose processes the saves or memories you allow it to access under its own terms. If you allow Google Analytics, Google processes analytics data under its own terms and privacy policy. Sign-in is handled by Google, Apple or GitHub under their own privacy policies. We fetch previews by requesting the pages you save from our servers; the owners of those pages see that request, not you.

Analytics

We use Google Analytics 4 through Google Tag Manager to understand visits and product usage only when you allow optional analytics. We do not send saved links, project names, message text, or account details to Google Analytics. You can change your choice at any time using the button below. We also use Vercel Web Analytics for cookieless site traffic measurement. We do not use session replay or heatmaps.

Change analytics choice

Cookies

We use the cookies needed to keep you signed in. If you allow optional analytics, Google Analytics may store analytics identifiers in your browser. We do not use advertising cookies or cross-site advertising tracking.

Your rights

• You can see and edit everything you have saved inside ceevo, including your personal assistant memory and each project’s memory.
• You can delete an individual conversation from the Chats list. That deletes its messages and reminder records and declines any pending calendar proposals. Calendar events already created, completed calendar action receipts and separately saved memories remain. You can also export your saves, conversations, memories, reminders and calendar action history as JSON, or delete your account from Settings. The export never includes OAuth credentials. Account deletion permanently removes your profile, content and stored memories.
• Under the GDPR you can also ask us for a copy of your data, ask us to correct or delete it, or object to how we use it. Email hello@ceevo.me. You can also complain to the Latvian Data State Inspectorate.

Retention

Your saves, memories and conversations remain while your account is active unless you delete them. Individual chat deletion removes that conversation and its reminder records; saved memories and completed calendar action receipts are kept separately. Operational task-step details are removed after 90 days, terminal message-delivery records after 180 days, and completed reminder/task records after 365 days. Active recurring reminders are retained until they are cancelled or finish. Account deletion removes data from active systems; encrypted backups expire within 30 days. Server logs are kept for up to 30 days.

Children

ceevo is not intended for children under 16 and we do not knowingly collect their data.

Changes and contact

If this policy changes in a way that matters, we will say so on the site or by email. The controller is Evita Kate Miller, Riga, Latvia. Contact: hello@ceevo.me.