Aevum Conclave

Privacy Policy

Last updated: April 20, 2026

This Privacy Policy explains what information Aevum Conclave (the "Service", operated by Aevum LLC, a Washington State limited liability company based in Sultan, WA) collects, why we collect it, and how we handle it. We are committed to using as little personal data as is required to operate the Service.

1. Information we collect

  • Account data — email address and a hashed password, stored by our authentication provider Supabase.
  • Deliberation content — the questions you ask, the agent answers, the synthesized output, files you attach, and follow-up turns. Stored in our Supabase Postgres database.
  • Usage events — model called, token counts, estimated cost, status (success / error / timeout), and duration. Used for billing, quotas, and reliability monitoring.
  • Memory facts (opt-in, paid plans) — short text facts auto-extracted from your deliberations and their vector embeddings, used to give you better context across sessions.
  • Billing data — handled by Stripe. We store only your Stripe customer/subscription IDs and current plan; we do not receive or store your card details.
  • Operational logs — error traces via Sentry (when enabled) and standard request logs from our hosting provider Vercel.

2. How we use your information

  • To deliver the deliberation Service and synthesize answers
  • To enforce plan quotas and bill you accurately
  • To investigate errors, abuse, and performance regressions
  • To provide cross-session context (only if you opt in to memory)
  • To communicate service-related notices (billing receipts, security alerts, material policy changes)

We do not use your data to train our own models. We do not sell your data.

3. Third-party AI providers

To produce answers, the Service transmits your prompts and any attached file content to the model providers you have enabled:

We send these providers only what is necessary to fulfil your request via their paid API endpoints, where (per their commercial terms at the time of writing) inputs are not used to train their models. Their handling of your data is governed by their own terms.

4. Service subprocessors

  • Supabase — authentication and Postgres database (data stored in the United States)
  • Vercel — application hosting and edge runtime
  • Stripe — payment processing and subscription management
  • Sentry — error monitoring (only when configured; redacts request bodies by default)

5. Data retention

We retain your deliberations, memory facts, and usage events for as long as your account is active. When you delete your account, we delete your account and associated rows from our database within 30 days. Backups are rotated within 90 days. We may retain minimal records (e.g., billing receipts) where required by law.

6. Your rights

You can:

  • View and delete individual deliberations from the history sidebar
  • View, add, and delete individual memory facts at /account/memories
  • Toggle the memory feature off at any time from your account page
  • Cancel your subscription from the Stripe billing portal
  • Request full account and data deletion by emailing wylee@aevumos.io

If you are in the EU/UK, you also have rights under GDPR including access, correction, and portability. Contact us to exercise these rights.

7. Cookies

We use only first-party, strictly-necessary cookies — primarily the Supabase session cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies.

8. Security

All traffic is served over HTTPS. API keys for model providers are held server-side only and never exposed to the browser. Database access is gated by Supabase Row-Level Security with `auth.uid()`-scoped policies. Stripe handles all payment information directly — we never see card numbers.

9. Children

The Service is not directed at children under 18 and we do not knowingly collect data from them.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced by email or in-product notice. Continued use after the effective date constitutes acceptance.

11. Contact

Aevum LLC, Sultan, WA, USA. Privacy questions or requests: wylee@aevumos.io