Privacy Policy

1.Overview

Vetta ("we," "us," "our"), a product of Relixir, Inc. (the company behind Naïve), operates the platform at usevetta.ai and app.usenaive.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you consent to the practices described in this policy.

2.Information We Collect

2.1 Information You Provide

Account information: Name, email address, organization name, and billing details when you register or update your account.
Agent configuration and content: Agent definitions, instructions, skills, files, secrets you store in the vault, and other materials you upload or generate through the Service.
Communications: Messages you send to us (e.g., support requests, feedback) and information you provide when you authorize connections to third-party tools.

2.2 Information Collected Automatically

Session data: Sessions run by your agents produce a durable, sequence-numbered event log, including the prompts sent to models, the completions returned, tool calls and their results, and files produced in the sandbox. We store this to provide session history and resumability, support billing disputes, debug the Service, and investigate abuse. It is retained under the same policy as the rest of your account data (see "Data Retention" below) and is deleted with it.
Usage data: How you use the Service, including feature usage, sessions run, compute and model consumption, and spend metered against your budget.
Device and log data: IP address, browser type, operating system, device identifiers, access times, and referring URLs.
Cookies and similar technologies: We use cookies, local storage, and similar technologies to operate the Service, maintain sessions, and analyze usage.

2.3 Information from Third Parties

When you connect third-party tools or services to an agent, we receive data authorized by you through those connections. We process such data in accordance with the permissions you grant and the third party's terms.

3.How We Use Your Information

Provide, operate, maintain, and improve the Service
Run your agents and sessions, including routing model requests and executing the tool connections you authorize
Authenticate users, manage accounts, and process payments
Send transactional emails, support communications, and service-related notices
Analyze usage patterns, monitor performance, and enhance the Service
Comply with legal obligations, enforce our Terms of Service, and protect our rights and the rights of others

4.Legal Basis for Processing (EEA/UK)

For users in the European Economic Area and United Kingdom, we process personal data based on: (a) performance of our contract with you; (b) your consent where applicable; (c) our legitimate interests in operating and improving the Service; and (d) compliance with legal obligations.

5.Sharing and Disclosure

5.1 Service Providers

We share information with trusted service providers that assist us in operating the Service (e.g., hosting, sandboxed compute, payment processing, analytics, AI model providers). These providers are contractually bound to protect your data and use it only for the purposes we specify.

5.2 Tool Connections

When you authorize a tool connection, we transmit data to that third-party service in accordance with your agent's configuration and tool policies. Those services have their own privacy policies governing their use of your data.

5.3 Legal and Safety

We may disclose information where required by law, court order, or government request; to protect our rights, property, or safety or that of others; or in connection with a merger, acquisition, or sale of assets. In each case we disclose only the minimum information necessary, use de-identified or aggregated data in place of identifiable information wherever the purpose can reasonably be achieved without identifiers, and require any recipient to be bound by confidentiality obligations no less protective than our own. Where the law permits, we will give you notice before disclosing your information in response to a legal demand.

6.Cookies and Tracking

We use cookies and similar technologies for essential operation (e.g., authentication, session management), functionality (e.g., preferences), and analytics. You can manage cookie preferences through your browser settings. Disabling certain cookies may limit Service functionality.

7.Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Upon account deletion, we delete or anonymize your data within 90 days, except where retention is required by law (e.g., tax, legal compliance) or for legitimate business purposes (e.g., dispute resolution).

8.Data Security

We implement commercially reasonable technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, per-organization isolation, and a write-only credential vault for secrets you store with us. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9.Your Rights and Choices

9.1 Account Settings

You may access, update, or correct your account information at any time through the Service settings.

9.2 EEA/UK and Other Jurisdictions

Depending on your location, you may have rights to access, rectify, erase, restrict processing, object to processing, or receive a copy of your data in a portable format. You may also have the right to lodge a complaint with a supervisory authority. To exercise these rights, submit a request to support@usenaive.ai.

9.3 California Residents (CCPA/CPRA)

California residents have rights to know what personal information we collect, request deletion, opt out of the sale or sharing of personal information, and non-discrimination. We do not sell personal information as defined under the CCPA. To exercise your rights, submit a request to support@usenaive.ai.

10.International Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We take appropriate safeguards (e.g., Standard Contractual Clauses, adequacy decisions) to ensure your data receives adequate protection in accordance with applicable law.

11.Children

The Service is not intended for users under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please notify us at support@usenaive.ai and we will delete it promptly.

12.Changes to This Policy

We may update this Privacy Policy from time to time at our discretion, effective upon posting to the Service. The "Last updated" date above reflects the most recent revision. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

13.Contact Us

For any questions about this Privacy Policy, to exercise your rights, or for any other privacy matter, contact us at support@usenaive.ai. This is our primary contact method.