Privacy Policy

Introduction

Neptune AI LLC ("Neptune AI," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Odyssey (the "Service"), our AI model comparison and orchestration platform.

By using the Service, you consent to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

This Privacy Policy applies to all visitors, users, and others who access or use the Service, including both free and paid subscribers.

1. Information We Collect

1.1 Information You Provide

Account Information

When you create an account, we collect your email address, password (stored in hashed form), and any display name or profile information you choose to provide. If you authenticate through a third-party provider (e.g., Google, GitHub), we receive your name and email address from that provider.

User Content

We collect the content you submit to the Service, including:

• Prompts and messages you send to AI models
• Documents you upload for analysis (PDF, DOCX, TXT, images)
• Custom agent configurations and project settings
• Votes and ratings you provide in comparison mode
• Feedback and support inquiries

Payment Information

If you purchase a subscription, our payment processor (Stripe) collects and processes your payment information. We do not directly store your credit card numbers. We receive transaction confirmations, subscription status, and billing address information.

API Keys (BYOK Users)

If you provide your own API keys for AI providers, we encrypt these keys at rest using AES-256 encryption. Keys are only decrypted at runtime to make API calls on your behalf and are never logged or transmitted unencrypted.

1.2 Information Collected Automatically

Usage Data

We automatically collect information about your interactions with the Service, including:

• Features accessed and actions taken
• Models selected and comparison patterns
• Session duration and frequency of use
• Error logs and performance metrics
• Token usage and cost calculations

Device and Technical Information

We collect information about the device and browser you use, including:

• IP address (may be anonymized)
• Browser type and version
• Operating system
• Device identifiers
• Referring URLs and pages visited
• Time zone and language preferences

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Provision

• Process your prompts through AI models and return responses
• Store your conversation history for your access
• Provide document analysis and semantic search capabilities
• Enable agent orchestration and project management
• Process payments and manage subscriptions

2.2 Service Improvement

• Generate aggregate, anonymized statistics for leaderboards
• Analyze usage patterns to improve features
• Develop new products and services
• Debug and fix technical issues

2.3 Communications

• Send important service updates and security alerts
• Respond to your support requests
• Send marketing communications (with your consent)

2.4 Legal and Safety

• Enforce our Terms of Service
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

3. AI Model Interactions

When you use Odyssey, your prompts are sent to third-party AI providers to generate responses. This is essential to how the Service works. You should be aware of what data is shared.

3.1 What Gets Sent to AI Providers

• Your message/prompt text
• Conversation context (previous messages in the same thread)
• Document content (if using document analysis features)
• Web search results (if using web search feature)
• System instructions and model parameters
• Image content (for vision-enabled models)

3.2 Third-Party AI Providers

We integrate with the following AI providers. Each has their own privacy policy governing how they handle data:

• OpenAI (GPT-5 series)
• Anthropic (Claude 4.5 series)
• Google (Gemini series)
• Mistral AI (Mistral series)
• xAI (Grok series)
• DeepSeek (DeepSeek series)
• Moonshot AI (Kimi K2 series)
• Cohere (Command series)

3.3 API Provider Data Handling

When using Neptune AI' API keys (default for most users), we have agreements with providers that include data protection provisions. When using BYOK (Bring Your Own Key), your usage is subject to your direct agreement with each provider.

4. Data Sharing & Disclosure

4.1 We Share Data With:

AI Providers

As described above, your prompts and content are shared with AI providers to generate responses.

Service Providers

We use third-party services to operate the platform:

• Supabase - Database and authentication
• Vercel - Website hosting
• Railway - API hosting
• Stripe - Payment processing
• Tavily - Web search functionality
• Redis/Upstash - Caching and rate limiting

Analytics (Privacy-Focused)

We may use privacy-respecting analytics tools to understand usage patterns. We do not use invasive tracking or advertising networks.

4.2 We Do NOT:

• Sell your personal data to advertisers, data brokers, or third parties
• Share your conversations with other users (unless you explicitly share them)
• Use your data for targeted advertising
• Provide access to your data for purposes unrelated to the Service

4.3 Legal Requirements

We may disclose your information if required by law, including:

• In response to lawful requests by public authorities
• To comply with a subpoena, court order, or legal process
• To protect the rights, property, or safety of Neptune AI, our users, or others
• To investigate potential violations of our Terms of Service

We will notify you of such requests where legally permitted and practical.

4.4 Business Transfers

If Neptune AI is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account data: Retained until you delete your account
• Conversation history: Based on your subscription tier (7 days for Free, unlimited for paid)
• Documents: Retained until you delete them or your account
• Usage data: Retained for up to 2 years for analytics purposes
• Payment records: Retained as required by tax and accounting laws (typically 7 years)

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

6. Data Security

We implement industry-standard security measures to protect your information:

Technical Safeguards

• All data encrypted in transit using TLS 1.3
• Sensitive data (API keys, passwords) encrypted at rest using AES-256
• Regular security assessments and penetration testing
• Web Application Firewall (WAF) protection
• DDoS mitigation
• Rate limiting and abuse prevention

Organizational Safeguards

• Role-based access controls for internal systems
• Employee security training
• Incident response procedures
• Regular security policy reviews

7. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access Rights

• Access: Request a copy of the personal data we hold about you
• Portability: Export your conversation history in a machine-readable format

7.2 Control Rights

• Correction: Update or correct inaccurate personal information
• Deletion: Delete your account and all associated data
• Restriction: Request that we limit processing of your data
• Objection: Object to processing of your data for certain purposes

7.3 Communication Preferences

• Marketing opt-out: Unsubscribe from promotional emails
• Cookie preferences: Manage cookies through your browser settings

To exercise these rights, visit your account settings or contact us at info@neptunetechnologies.com.

We will respond to your request within 30 days. We may require verification of your identity before processing certain requests.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

8.1 Right to Know

You have the right to request that we disclose:

• Categories of personal information we collect
• Sources of that information
• Business purpose for collecting the information
• Categories of third parties with whom we share information
• Specific pieces of personal information we have collected about you

8.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

8.3 Right to Opt-Out of Sale

We do NOT sell your personal information. This includes not sharing personal information for "cross-context behavioral advertising" as defined under California law.

8.4 Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

To exercise your California privacy rights, contact us at info@neptunetechnologies.com or call us at the number provided below.

9. International Data Transfers

Neptune AI is based in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and potentially other countries where our service providers operate.

9.1 EU/EEA/UK Users (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, we comply with the General Data Protection Regulation (GDPR). Our legal bases for processing your information include:

• Contract: Processing necessary to provide the Service
• Legitimate interests: Improving our services, security, fraud prevention
• Consent: For marketing communications and optional features
• Legal obligation: Compliance with applicable laws

For international data transfers, we rely on Standard Contractual Clauses approved by the European Commission and other lawful transfer mechanisms.

10. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve the Service:

10.1 Essential Cookies

Required for the Service to function, including authentication and security. These cannot be disabled.

10.2 Functional Cookies

Remember your preferences (e.g., theme, language, model selections).

10.3 Analytics Cookies

Help us understand how users interact with the Service. We use privacy-focused analytics that do not track individual users across sites.

Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using parts of the Service. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block cookies from specific sites
• Block all cookies

11. Children's Privacy

The Service is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@neptunetechnologies.com. We will take steps to delete such information from our systems.

If we learn that we have collected personal information from a child under the applicable age, we will delete that information as quickly as possible.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email (for significant changes)
• Display a prominent notice within the Service
• Provide at least 30 days' notice before changes take effect for material changes

We encourage you to review this policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EU/EEA users: If you have concerns about our data processing that we have not satisfactorily addressed, you have the right to lodge a complaint with your local data protection authority.