Jevlin
Sign in

Privacy

What Jevlin keeps about you and your searches, for how long, and who else sees it.

Last updated 2026-10-12
Draft — not yet reviewed by counsel
This is a plain-language working draft. It describes how the service works today, but it is not final and may change before it is reviewed.

1. Your account

From the sign-in provider (GitHub or Google): your e-mail address, whether the provider verified it, your name and avatar. From you: the organizations, projects, members and invites you create, API key metadata (label, scopes, expiry — never the secret, which we store only as a hash), limits, webhook URLs, and a log of the changes you make, shown on your Account page.

2. Your searches

Each search produces a trace: which indexes were asked, what each returned, timings and cost. Whether the trace also holds the content — your query, the results and any conversation you send — is the project's retention setting:

  • Content retained (the default for a project): queries, results and reported conversation are stored with the trace.
  • Zero retention: only metadata (indexes, statuses, timings, cost) is stored; the query and results are not written anywhere.

Traces are kept for 30 days and then deleted automatically. The per-request usage ledger (what each call cost, which index, when) is kept for as long as it is needed for billing and accounting.

3. Who else sees it

  • Search providers. Your query is sent to the indexes and research agents that answer it, under their own terms.
  • Telemetry. We run a self-hosted Langfuse instance for tracing and quality review; for projects that retain content it holds the same trace content, under the same retention.
  • Payments. Stripe processes card payments; we keep the amount and status, not card details.
  • E-mail. Invitations are sent through our mail provider to the address you enter.
  • We do not sell your data.

4. Your choices

  • Set a project to zero retention to keep search content out of storage entirely.
  • Download everything we hold about your account as one file from the Account page.
  • Close your account from the same page. Closing is a flag: sign-in stops and your sole-owned projects are disabled, but records are retained, not erased. To have them erased, contact us.

5. Security

Traffic is encrypted in transit. API keys and invite links are stored only as hashes and shown once. Console sessions last at most seven days.

6. Contact

Write to us at the contact address on jevlin.ai [a dedicated legal / privacy address is still to be added to this draft].