Privacy Policy

Who we are

niveau is operated by Vound Brand UG (haftungsbeschränkt) (“we”, “us”), the controller responsible for your personal data under the GDPR. For any privacy question, or to exercise the rights below, contact us at inbox@niveau.work or inbox@niveau.work.

Vound Brand UG (haftungsbeschränkt)
Am Markt 11, 17309 Pasewalk, Germany
Managing Director: Remington Splettstoesser
Amtsgericht Neubrandenburg, HRB 7565 · VAT ID DE293728593

We have not appointed a Data Protection Officer, as we are not currently required to do so. Privacy requests reach us at the address above or at inbox@niveau.work.

The short version

• The desktop app runs on your computer. Your files, prompts, and results stay there.
• We don’t run third-party analytics, advertising, or tracking cookies on this site.
• We only collect what you send us — for example, an email address you type into a form.
• We never sell your data.

The desktop app

niveau is a local-first workbench. Agents work on a copy of your data on your own machine, and nothing is applied to your real files until you approve it. By default the app does not send us usage telemetry or the content of your work.

When you choose to connect an AI model provider (for example by adding your own API key), the prompts and content you send for that task are transmitted to that provider so it can generate a response. That processing is governed by the provider’s own terms and privacy policy. You decide which provider, if any, to connect; you can work with a local model or none at all. Transcripts of your runs are stored on your own machine.

This website

We collect personal data on this website in only these ways:

• Forms you submit. When you request access, the private beta, enterprise or cloud information, or otherwise fill in a form, we receive the details you enter, such as your name, email address, phone number, company, or a message. We use this only to reply to you, and where you ask for the beta, to call you back and arrange your personal setup. Your phone number is used solely for this callback; we never use it for marketing calls or messages.
• Page-view statistics. We count visits with Vercel Web Analytics to see which pages are read. It sets no cookies and stores nothing on your device. A visitor is recognised only by a hash of the request that is discarded after one day, so visits are not linked across days or websites and no profile of you is built.
• Server logs. Like any website, our hosting provider processes technical data (such as IP address, browser type, and request time) to serve pages and keep the service secure and reliable.

We do not use Google Analytics, advertising pixels, cross-site trackers, or cookies of any kind. Because nothing is stored on your device, there is no cookie consent banner to click through.

Legal bases (GDPR)

Where the GDPR applies, we rely on:

• Your request / consent (Art. 6(1)(a)/(b)) when you submit a form so we can respond and, where relevant, take steps toward a contract.
• Legitimate interests (Art. 6(1)(f)) to operate, secure, and improve the website and to communicate with people who contact us.

Who processes data for us

We share the minimum necessary with service providers that process data on our behalf:

• Resend — delivers the notification emails generated by our forms.
• Twilio — delivers the internal SMS notification that alerts us to a beta request so we can call you back quickly. The SMS contains the contact details you submitted.
• Vercel — hosts and serves this website and provides the cookieless page-view statistics described above.

These providers act as processors under agreements that restrict their use of the data to providing their service. Some are based in the United States, so submitting a form may involve transferring your data internationally under appropriate safeguards (such as Standard Contractual Clauses).

How long we keep it

We keep form submissions and related correspondence only as long as needed to answer you and for a reasonable follow-up period, then delete them. Server logs are retained for a short period for security and diagnostics. You can ask us to delete your data at any time.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email inbox@niveau.work. If you are in the EU/EEA and believe we have handled your data improperly, you also have the right to lodge a complaint with a supervisory authority. Our lead authority is Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern (Schloss Schwerin, Lennéstraße 1, 19053 Schwerin); you may also contact the authority where you live.

Children

niveau is a professional tool and is not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy as the product evolves. When we make material changes, we’ll update the date at the top of this page.

Contact

Questions about privacy? Email inbox@niveau.work or inbox@niveau.work. For help using the product, see our support page.