Privacy Policy

How We Think About Privacy

Nessie is built by Anna and Tiger. We take privacy seriously because the product only works if you trust it with your thinking. This policy explains what data we collect, how we use it, and what choices you have.

1. Your Content

Nessie syncs and processes your AI conversations to generate contexts. How your content is handled depends on the modes you choose - you can pick them during setup and change them anytime in Settings:

• Privacy Mode (default): Your content is never stored on our servers and never used to improve our systems. Content is processed in memory only for the duration of a request and deleted immediately afterward. Enabling Cloud Sync (see Section 4) overrides this for storage only - your content is then stored on our servers solely for cross-device sync, and is still never used to improve our systems.
• Help Improve Nessie: You can opt in to share usage patterns along with generated artifacts and relevant snippets of your AI conversation transcripts to help us improve the product. Cloud Sync does not change what gets shared under this mode. You can switch modes at any time.

Regardless of mode, we never sell your data to third parties. Any usage data you share is used only to improve the product.

2. What Information We Collect

We collect the minimum necessary to provide and improve the service:

• Account Information: Your email address for authentication and essential communication.
• Product Usage Data: Limited usage data tied to your account (e.g., number of conversations synced, features used). This does not include the content of your conversations or contexts.
• Crash and Performance Data: Error reports and performance metrics to help us fix bugs and improve reliability.

3. What We Will Never Do

• Sell your personal data
• Share your data for advertising
• Use your content to train public AI models

4. How Sync Works

Provider Sync

When you connect an AI account (ChatGPT, Claude, Gemini, or Perplexity), Nessie opens a web view to that provider's official login page. Your credentials are entered directly on the provider's site - Nessie never sees, stores, or transmits your passwords.

Session tokens used for syncing are stored locally on your Mac. They never leave your device. Your conversations are synced directly to your local database.

To generate summaries and search indexes, conversation content is sent over an encrypted connection to our server and on to our third-party AI providers for processing. It is held only for the duration of each request, then discarded - it is never written to our database, never logged, and never accessible to anyone at Nessie. Our AI providers do not use your content to train their models. The current list of these providers and their retention terms is published in our trust center.

Cloud Sync (Opt-In)

You can optionally enable Cloud Sync to sync your Nessie data across devices. When enabled, your contexts, conversations, and chat messages are stored on our servers. Session tokens and provider credentials are never synced - they remain local to each device.

Cloud Sync data is encrypted at rest on our servers and encrypted in transit using TLS. Your data is stored in a private database with no public network access. You can disable Cloud Sync at any time in Settings.

5. Data Security

We use industry-standard security measures, including encryption in transit and at rest, to protect all user data.

6. Your Rights and Control

Your data is yours.

• You can switch between Privacy Mode and Help Improve Nessie at any time.
• You can enable or disable Cloud Sync at any time.
• You can access and export your data at any time.
• To delete your account, contact us at founders@nessielabs.com. If you have opted into Cloud Sync, we will delete all associated data from our servers.

7. Changes to This Policy

If we make material changes, we will notify you and explain the changes clearly.

8. Contact Us

Questions? Reach us at founders@nessielabs.com.