Privacy Policy

This Privacy Policy applies to the Nemeow website, workspace, conversational development, knowledge, content extraction, business data and project publishing services (together, the "Service").

The global Service is operated by FILPET GLOBAL LIMITED, a company established in Hong Kong. We are the data user or controller for account, security, support and service-administration information. When an organization uses business data or workspace features to process personal information on its own behalf, that organization decides the purpose and legal basis and we process the submitted content to provide the Service. Where law requires a separate processor agreement, the organization must put that agreement in place before submitting such personal information.

We collect the categories of information needed to provide and protect the Service:

• Account and profile information: username, password credential (for password accounts), display name, biography, avatar, preferences and account timestamps. If you choose Google sign-in, we verify Google's signed identity assertion, including the verified email status, and store your Google user identifier and display name to create or access your account. We do not retain Google access tokens or refresh tokens.
• Workspace and user content: prompts, conversations, projects, versions, knowledge spaces, uploaded files, extracted text, transcripts, generated output and feedback.
• Business data: table and field definitions, records, field values, relations and saved view settings that you create in your account.
• Published content: project titles, pages and assets that you choose to make publicly accessible.
• Support and transaction information: messages and request history. Global purchasing is currently unavailable; if an approved payment capability is enabled after notice, we may also process the internal order number, product and price snapshot, amount, currency, status, provider transaction identifier and payment or refund timestamps needed to fulfil and audit that purchase. Payment credentials remain with the applicable provider rather than ordinary workspace storage.
• Redemption-code information: an irreversible code digest, last-four hint, benefit type, your selected Media partnership, Service provider, Partner organization or E-commerce source, redeeming account, status and timestamps. We do not retain the plaintext code after generation.
• AI usage and credit ledger information: feature type, model tier, input and output token counts, credits temporarily set aside before a request and credits actually charged, available and temporarily held balances, lifetime grants and usage, request IDs, unique event IDs, idempotency identifiers, settlement status and timestamps. Token usage may be returned with a response by the AI service provider or generated and recorded by Nemeow while providing the feature.
• Technical and usage information: network address, browser and device details, language, referring pages, request and feature activity, security events, cookies and session identifiers.

Controlled Apps also process App-specific user identifiers, session digests, sign-in and security records, visitor-submitted business records, approval records, and the inputs, outputs and usage needed for that App's AI functions. Build failure reports and necessary generation diagnostics support fault investigation; do not include passwords, keys or unrelated personal information in a report.

Account identifiers and the credentials required by your selected sign-in method are necessary to create or access an account; Google sign-in does not require a Nemeow password. Without the required sign-in information we cannot provide account features. A request type, subject and description are required to create a support case; without them we cannot open or investigate the case.

Workspace prompts, files, business records and profile details are otherwise provided at your choice, but a feature cannot process content that you do not provide. Do not submit passwords, verification codes, government identity documents, sensitive personal information or another person's information unless it is necessary, lawful and you have authority to do so.

We receive information directly from you, automatically when you use the Service, from integrations that you choose to connect, and from service providers that help us prevent abuse or deliver requested features. If another person or organization provides information about you, they must have authority to do so.

We process information to create and secure accounts; follow your instructions; generate, store and publish content; synchronize workspaces; confirm that enough credits are available; temporarily set aside the estimated amount before a request; settle actual usage and return the unused amount; prevent duplicate deductions; validate redemption codes, record their channel source, prevent reuse and apply the encoded benefit; show balances and credit history; provide support and resolve credit disputes; and, if Global purchasing becomes available, create one-time orders, verify provider results, fulfil the order snapshot, process confirmed refunds and reconcile transaction disputes. We also process information to measure and improve reliability, prevent fraud and abuse, enforce our Terms and comply with legal obligations.

Depending on the activity and applicable law, we rely on performance of our contract with you, our legitimate interests in operating and protecting the Service, your consent, or compliance with law. Where we rely on legitimate interests, we consider the effect on your rights. You may withdraw consent at any time without affecting earlier lawful processing.

When you use the standard AI feature, the prompt and any conversation or workspace content needed for that request are sent to our currently selected AI API provider, which is established in mainland China, and the generated response is returned to Nemeow. The provider processes that input as a service provider for the request; its consumer-service privacy policy does not replace this Policy. Speech input is sent only when you invoke a speech feature and is handled by the configured speech-processing provider.

Do not include sensitive or third-party personal information in AI or speech input unless you have a lawful basis and any required notice, consent and transfer arrangement. Output can be generated automatically, but Nemeow does not use automated processing to make decisions that produce legal or similarly significant effects about you.

FILPET GLOBAL LIMITED does not itself repurpose private projects, private conversations or private knowledge-space content to train a public foundation model unless we first provide a separate explanation and obtain any consent required by law. A provider's retention or model-improvement use must be determined from its verified contract and the notice for the feature; do not assume a consumer privacy policy covers downstream Nemeow input.

We may provide the minimum information required to service providers that support AI inference, speech processing, Cloudflare hosting, EU database and object storage, content delivery, communications, payment, analytics and security. These are defined classes of recipients, not permission to disclose information to unrelated business partners. Contact support@nemeow.ai before using the Service for regulated personal information if you need the current provider, country and contractual-transfer details.

We do not sell personal information or share it for cross-context behavioural advertising. We may otherwise disclose information when you direct us to do so, when necessary to deliver the Service, during a corporate transaction subject to continuing safeguards, to protect rights and safety, or in response to valid legal process.

When you publish a project for public access, anyone with access to its public address may view, copy or share its content. Remove passwords, identity documents, confidential business material and other sensitive information before publishing.

When you connect a third-party service, information is exchanged according to the permission you approve. The third party's own privacy terms govern its independent processing.

The global Service uses the global market's dedicated infrastructure and data namespace. Its primary database and user-object storage are located in the European Union. Requests may traverse Cloudflare's network, and standard AI input is processed by the selected AI API provider in mainland China. Other configured providers or authorized personnel may process limited information in their operating countries when required to deliver a feature.

The global Service does not automatically share accounts, workspaces or business records with the China mainland Nemeow service. A storage location is not by itself an international-transfer safeguard. Where applicable law requires contractual clauses, an adequacy basis, consent, an assessment, a representative or another measure, that requirement must be satisfied for the relevant processing; this Policy does not by itself create or prove such a measure.

We retain account and workspace information while your account is active and as reasonably necessary to provide the Service. Credit accounts, requests and event-ledger records are normally retained while the account is active and as needed to reconcile settlements, resolve disputes, prevent duplicate deductions or abuse, and comply with law; we do not keep them longer than necessary for those purposes. Login sessions normally expire within 30 days, the device-local cookie choice expires after 180 days, and security audit metadata is configured for a 365-day retention period. Support and transaction records are kept for the period needed to resolve the request, document the outcome, meet contractual commitments and comply with law.

When information is no longer needed, we delete or de-identify it. Account deletion removes market-local account content after object cleanup, subject to legal holds and limited protected-backup rotation. Device-local preferences remain on the device until they expire or you clear them.

Temporary image or audio inputs for platform runtime AI normally expire after 30 minutes while upload is incomplete, or 2 hours after upload completion. Temporary results normally expire 24 hours after creation. Expiry denies access and schedules cleanup; copies separately saved in business records, projects or knowledge spaces follow their own retention rules.

We use measures appropriate to the risk, including encrypted transport, salted password hashing, session protection, account and market isolation, access controls, request validation, rate limits, monitoring and backups. No online service can guarantee absolute security.

If a security incident is likely to create a material risk to affected people, we will investigate and provide notices required by applicable law.

You can manage profile details and workspace content through the product and review your credit balance and event history in the account center. An account data export includes the credit account, request and event records associated with your account. Depending on where you live, you may also have rights to access, correct, delete or receive a copy of personal information; restrict or object to processing; withdraw consent; and complain to a data protection authority.

Send a request to the Privacy Request Coordinator at support@nemeow.ai. We may verify your identity and authority before acting and retain the minimum record needed to document the request. Our normal response target is no more than 30 days; a Hong Kong data access request is handled within the period required by the Personal Data (Privacy) Ordinance, normally no later than 40 days.

If you first raise a Hong Kong personal-data concern with us and remain dissatisfied, you may review the Privacy Commissioner for Personal Data complaint procedure.

Public App accounts are separate from platform accounts and other Apps. An App user can export their own App data or request deletion of that App account through its account area; this does not delete the platform owner's whole workspace. App operators should explain their processing purposes and rights contact to visitors. Platform-account data-copy or deletion requests can be submitted under Data rights in Support or to the email above. The account center currently has no self-service export or deletion button; submitting a request does not complete identity verification or deletion.

We do not currently use personal information for direct marketing or provide it to another person for that purpose. If this changes, we will first give the notice required by applicable law, obtain any required consent or indication of no objection, and provide a free way to stop the use.

We use cookies and similar technologies needed for sign-in, security and core functionality. If optional analytics or advertising technologies are introduced, we will provide the notice, choice and consent controls required for the applicable market. More detail is available in the Cookie Policy.

The Service is not directed to children who cannot lawfully consent to data processing or enter the applicable agreement in their country. We do not knowingly ask a child to submit sensitive personal information. A parent or guardian should contact us if they believe a child provided information without appropriate permission, and we will verify the request and take reasonable steps to restrict or delete the information.

We may update this Policy as the Service or applicable law changes. We will publish the current version here and provide additional notice before a material change takes effect when required.

Questions, privacy requests and concerns can be sent to support@nemeow.ai.