Privacy Policy

Back to Home

Questions or feedback? Email us at info@brevilabs.com.


TLDR

  • Your notes stay yours. We never sell your data, and we never use your prompts, notes, or outputs to train any model.
  • Our chat models run only in the US. Every Brevilabs-hosted chat model runs on DeepInfra, which processes your data only in the United States and does not sell it or train on it. See DeepInfra's privacy policy and data privacy terms.
  • You choose where each request goes: to an AI provider you configure, to a model or feature hosted by Brevilabs, or to a model on your own device.
  • We don't keep your content. When you use a Brevilabs-hosted model or feature, we process your request to return the result and do not store it afterward.
  • Hosted in the US. Our servers run on Vercel and Railway in the United States.
  • We keep only what we need to run your account, license, and billing, plus usage records for hosted features that never include your content.

Last updated 2026-10-09

How your data flows

Copilot sends note content only when you use a feature that needs it, and only to the service you chose for that feature.

  • An AI provider you configure. When you use your own API key with a provider such as OpenAI, Anthropic, or Google Gemini, requests go directly from your device to that provider. Brevilabs never sees them. The provider's own terms and privacy policy apply.
  • A Brevilabs-hosted model or feature. Models and features hosted by Brevilabs, such as web search, run through our backend on Railway in the United States over encrypted connections. Our chat models run only on DeepInfra, a US company that processes your data only in the United States (privacy policy). We pass your request only to the vetted model or tool providers needed to answer it, under agreements that bar them from training on your data. We do not keep the content once the result is returned.
  • A model on your own device. With a local model, for example through Ollama or LM Studio, your requests stay on your machine.
  • Agents you connect. When you connect an outside agent, such as a CLI agent, its own settings decide where your data goes.

What we collect

  • Account and license: your email address, name, sign-in method, plan, and license status, and, if you choose to answer it, how you found Copilot.
  • Payments: handled by Stripe. We never see or store your full card number.
  • Hosted-feature usage: for billing, rate limits, and reliability, we record which feature or model you used, how much you used, and whether the request succeeded. These records never contain your prompts, notes, or responses.
  • Website analytics: non-advertising measurement on our website, such as pages viewed, referrer, and browser and device type. The Copilot plugin itself contains no usage tracking.
  • Support: what you send us by email, or in a report you choose to submit.

We do not sell your personal information or run advertising. We do not knowingly provide accounts to anyone under 18.

Who we share it with

We share information only with the service providers we need to run Copilot, each bound to keep it confidential and use it only to provide their service to us:

  • Vercel and Railway host our website and backend in the United States.
  • DeepInfra runs our hosted chat models, only in the United States.
  • Specialized providers handle optional tools, such as web search and reading web pages and YouTube transcripts.
  • Stripe for payments.
  • Analytics and email providers for our website and service messages.

A list of our current providers is available on request. We may also disclose information when the law requires it, or to a successor in a merger or acquisition, who must honor this policy.

Where your data is processed

Brevilabs is a United States company. We store your account data in the United States. Every hosted chat model runs on DeepInfra, only in the United States, and our servers on Vercel and Railway also run in the United States, so your chat requests stay in the US. A few optional tools, such as web search and reading web pages, use specialized providers that may process requests outside the US. When EEA, UK, or Swiss law applies, we protect transfers with standard safeguards such as Standard Contractual Clauses.

We process your information to provide the service you signed up for, to keep it secure and running well, to meet legal obligations, and, for marketing, with your consent. You can withdraw consent at any time by emailing info@brevilabs.com.

Retention and deletion

  • We keep account, license, and billing records while your account is active, and afterward only as long as needed for legal obligations such as tax records.
  • We do not keep hosted prompts, notes, files, or outputs after your request finishes. Our providers may keep limited security logs under their own terms.
  • To delete your account and data, email info@brevilabs.com from the address on your account.

Your choices and rights

  • Choose where your data goes in the plugin's model settings. Use a local model to keep everything on your device.
  • Opt out of marketing with the unsubscribe link in any marketing email or by emailing us. We will still send essential account and security notices.
  • Cookies: our website uses minimal cookies, and the plugin uses no advertising cookies or trackers. You can block or clear cookies in your browser.
  • Your rights: depending on where you live, you can ask to access, correct, delete, or export your data, or object to how we use it. Email info@brevilabs.com. You can also complain to your local data protection authority.

Contact and changes

Brevilabs LLC is the data controller. For privacy questions, email info@brevilabs.com with the subject "Privacy Concern". We typically reply within 30 days. If we make a material change to this policy, we will update the date above and announce it in our Discord.

Open source

The Copilot plugin is open source under AGPL-3.0, so anyone can check what it sends and where. Some hosted features rely on proprietary Brevilabs services.