Privacy Policy

Who we are

niveau is operated by Vound Brand UG (haftungsbeschränkt) (“we”, “us”), the controller responsible for your personal data under the GDPR. For any privacy question, or to exercise the rights below, contact us at privacy@niveau.work or hello@niveau.work.

Vound Brand UG (haftungsbeschränkt)
Am Markt 11, 17309 Pasewalk, Germany
Managing Director: Remington Splettstoesser
Amtsgericht Neubrandenburg, HRB 7565 · VAT ID DE293728593

We have not appointed a Data Protection Officer, as we are not currently required to do so. Privacy requests reach us at the address above or at privacy@niveau.work.

The short version

• The desktop app runs on your computer. Your files, prompts, and results stay there.
• We don’t run third-party analytics, advertising, or tracking cookies on this site.
• We only collect what you send us — for example, an email address you type into a form.
• We never sell your data.

The desktop app

niveau is a local-first workbench. Agents work on a copy of your data on your own machine, and nothing is applied to your real files until you approve it. By default the app does not send us usage telemetry or the content of your work.

When you choose to connect an AI model provider (for example by adding your own API key), the prompts and content you send for that task are transmitted to that provider so it can generate a response. That processing is governed by the provider’s own terms and privacy policy. You decide which provider, if any, to connect; you can work with a local model or none at all. Transcripts of your runs are stored on your own machine.

This website

We collect personal data on this website in only these ways:

• Forms you submit. When you request access, the private beta, enterprise or cloud information, or otherwise fill in a form, we receive the details you enter, such as your name, email address, phone number, company, or a message. We use this only to reply to you, and where you ask for the beta, to call you back and arrange your personal setup. Your phone number is used solely for this callback; we never use it for marketing calls or messages.
• The demo chat. When you type a message to Vo in the demo on our home page, we send it, together with the made-up conversation it belongs to, to an AI model so Vo can answer. We do not store your messages or link them to you; they live only in your browser tab and disappear when you close it. The demo uses made-up data, so please do not type personal details into it.
• Page-view statistics. We count visits with Vercel Web Analytics to see which pages are read. It sets no cookies and stores nothing on your device. A visitor is recognised only by a hash of the request that is discarded after one day, so visits are not linked across days or websites and no profile of you is built.
• Server logs. Like any website, our hosting provider processes technical data (such as IP address, browser type, and request time) to serve pages and keep the service secure and reliable.

We do not use Google Analytics, advertising pixels, cross-site trackers, or cookies of any kind. Because nothing is stored on your device, there is no cookie consent banner to click through.

Legal bases (GDPR)

Where the GDPR applies, we rely on:

• Your request / consent (Art. 6(1)(a)/(b)) when you submit a form so we can respond and, where relevant, take steps toward a contract.
• Legitimate interests (Art. 6(1)(f)) to operate, secure, and improve the website and to communicate with people who contact us.

Who processes data for us

We share the minimum necessary with service providers that process data on our behalf:

• Resend — delivers the notification emails generated by our forms.
• Twilio — delivers the internal SMS notification that alerts us to a beta request so we can call you back quickly. The SMS contains the contact details you submitted.
• Vercel — hosts and serves this website and provides the cookieless page-view statistics described above.
• OpenRouter — forwards what you type in the demo chat to the AI model that writes Vo’s reply (currently Anthropic’s Claude) and returns the answer. Neither we nor the demo keep a copy of the conversation.
• Linear — stores feedback you send from this website or our apps (your message, email address, any screenshots and, only if you choose to include them, app logs with personal data removed) so our team can track and answer it.

These providers act as processors under agreements that restrict their use of the data to providing their service. Some are based in the United States, so submitting a form may involve transferring your data internationally under appropriate safeguards (such as Standard Contractual Clauses).

How long we keep it

We keep form submissions and related correspondence only as long as needed to answer you and for a reasonable follow-up period, then delete them. Server logs are retained for a short period for security and diagnostics. You can ask us to delete your data at any time.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email privacy@niveau.work. If you are in the EU/EEA and believe we have handled your data improperly, you also have the right to lodge a complaint with a supervisory authority. Our lead authority is Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern (Schloss Schwerin, Lennéstraße 1, 19053 Schwerin); you may also contact the authority where you live.

Children

niveau is a professional tool and is not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy as the product evolves. When we make material changes, we’ll update the date at the top of this page.

Contact

Questions about privacy? Email privacy@niveau.work or hello@niveau.work. For help using the product, see our support page.