Copilot for Obsidian

Questions or feedback? Email us at info@brevilabs.com.

TLDR

No telemetry. Copilot does not track how you use the plugin.
We never train on your content. Brevilabs does not use your prompts, notes, or outputs to train any model. For third-party providers you configure, their own policies apply.
Your data goes only where you choose:
- A third-party provider you configure (e.g. OpenAI, Anthropic, Google Gemini) receives your requests directly — Brevilabs is never in the path.
- A Brevilabs-hosted Plus model or feature is handled by our secure backend and trusted enterprise model providers, used only to generate your result, then discarded — never stored, never used for training.
- A local model on your own device keeps everything on your machine.

Last updated 2026-05-31

How your data flows

Whoever runs the model you pick processes the content of your request. Copilot lets you choose who that is, and we keep our own footprint as small as possible.

Third-party provider you configure. When you select a provider such as OpenAI, Anthropic, or Google Gemini (typically with your own API key), the plugin sends your request directly from your device to that provider. Brevilabs does not proxy, log, or store it. The provider handles your data under its own terms and privacy policy.
Brevilabs-hosted Plus model or feature. Plus-exclusive models hosted by Brevilabs (such as the default copilot-plus-flash chat model and the bundled copilot-plus-* embedding models) and backend-powered Plus features (such as web search) are served by the Brevilabs backend (api.brevilabs.com). Your request runs on enterprise-grade, encrypted infrastructure and is handled by vetted enterprise model providers under agreements that bar them from training on your data or using it for anything other than returning your result. We process it transiently to answer you, and we do not retain it or train on it.
Local model on your device. Run a local model (for example via Ollama or LM Studio) with the local agent harness and nothing ever leaves your machine.

This applies to your AI request content. We still process the minimal account and license data described below, and our marketing website uses privacy-friendly analytics — but the plugin itself collects no usage telemetry.

Information we collect

We collect only what is necessary to run your account, your license, and the features you choose to use:

Account and license information — your email, username, and subscription status. Joining our community Discord is optional and governed by Discord's own terms.
Payment information — handled by Stripe; we never receive or store your full card details.
Plus request content — when you use a Brevilabs-hosted Plus model or feature, the request (prompt, note context, or a task input such as a search query) is sent to our backend, processed transiently on secure infrastructure, and not retained or used for training. If you use only third-party or local models, this is never sent to us.
Website analytics — aggregate, non-advertising measurement on obsidiancopilot.com, not linked to your plugin activity.

We do not collect plugin telemetry, sell your personal information, or run advertising. We do not intentionally collect sensitive categories of data (health, biometric, etc.) — please don't send such data through backend Plus features. We do not knowingly collect data from anyone under 18 and will close any such account.

We share personal information only with the limited parties needed to run the Service, each bound to keep it confidential:

Stripe — payment processing.
Discord — optional community platform.
Hosting and infrastructure providers — to run our website and account/license backend.
Enterprise model and search providers — to generate results for Brevilabs-hosted Plus models and features. We use reputable, enterprise-grade providers under data-protection agreements that limit them to serving your request and prohibit training on your data.
Third-party providers you choose — receive requests directly from your device under their own policies; they are parties you select, not Brevilabs' processors.

We may also disclose information where required by law, or in connection with a merger or acquisition (in which case we will require the recipient to honor this Privacy Policy). We take measures reasonably necessary to protect your information against unauthorized access, use, alteration, or destruction.

Legal bases (UK / EEA)

Where UK or EU law applies, we process your information to perform our contract with you (administering your account and license, support), for our legitimate interests (operating and securing the Service, preventing fraud, responding to you), and with your consent (e.g. invoking a backend Plus feature or signing up for marketing). You can withdraw consent anytime at info@brevilabs.com.

International transfers

Our account and license backend is operated in the United States, where the limited account data we hold is stored. Any AI provider you select may process requests in locations set by that provider. Where personal information is transferred out of the EEA, Switzerland, or UK to a country without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses; a copy is available on request.

Retention and deletion

We keep account and license information for as long as your account is active or as needed to provide the Service and meet legal obligations. Because we collect no plugin telemetry and don't store your AI request content, there is no prompt or note history held by Brevilabs to retain. You can request deletion of your account and data at info@brevilabs.com; some records may be retained where required by law.

Your choices and rights

Choose where your data goes by selecting your AI provider in the plugin; use a local model with the local harness to keep everything on-device.
Opt out of marketing anytime at info@brevilabs.com (we'll still send essential service notices).
Cookies — our website uses minimal cookies and privacy-friendly analytics; the plugin uses no advertising cookies or trackers. Manage cookies in your browser settings (see allaboutcookies.org).
Privacy rights — depending on your jurisdiction you may have rights to access, correct, delete, port, or object to processing of your data, and to withdraw consent. We collect the minimum necessary and offer simple ways to exercise these rights. Email info@brevilabs.com to make a request.

We do not respond to browser "Do Not Track" signals because we do not track you across sites.

Communications

If you've given us your email, we may occasionally send security or important product notices. We use our Discord server for general announcements, so these emails are rare. Opt out of non-essential email anytime at info@brevilabs.com.

Contact and changes

The data controller for the Service is Brevilabs LLC. For privacy questions or complaints, email info@brevilabs.com (use the subject "Privacy Concern" for the fastest response); we typically respond within 30 days. We may update this Privacy Policy from time to time; material changes will be reflected in the date above and announced in our Discord. Continued use after a change constitutes acceptance.

Open source

The Copilot plugin is open-source under AGPL-3.0; certain Plus features rely on proprietary Brevilabs backend services. Contributions to the open-source components are subject to the AGPL-3.0 license.

Privacy Policy