Hey Nabu

Privacy

What we store, why, and how to get rid of it.

What we store about you

• Your email address. It is how you sign in. There is no password — we send a link to your address instead. We never ask for a card, a password or an API key.
• Which organisation you belong to, and whether you are an owner, an admin or a member.
• Your request to join, if you asked for access: your address, why you want it or the first thing you would ask, and anything else you told us. A person reads it.
• Your invitation, if somebody invited you: your address, who sent it, and when you accepted.
• That we emailed you a welcome, if an organisation asked us to: your address, which organisation, and when. So it only goes to you once. We delete it soon after you leave that organisation, or it takes back your invitation.
• That an organisation removed you, if it did: which organisation, the address you had then, and when. So if it lets in everyone at its email domain, signing in again with that address does not add you back, even from a new account. It goes when your account goes.
• Links you make to invite people: when you made each one, and when it was used. Not who used it. We keep the link so you can copy it again. It goes when your account goes.
• Tokens you make, for connecting something that cannot open a browser. We store the name you gave it and a one-way hash. We cannot read the token back, which is why it is shown once.
• What you tell us to change. If you or your AI tell us an expert is missing something, has something wrong, or should answer differently, or that every answer should go differently, we keep what was said. You sent it on purpose. Ask us and we delete it. If you also sent your question and its answer, we keep those for 90 days, with who you are taken out. They go when your account goes.
• Whose suggestions we read first. We note the people whose word we trust most. It goes when your account goes.
• A corpus of your own, or a place in a community, if you ask for one. We keep what you wrote. It goes when your account goes.
• An expert you made, if you made one: that you made it, and your part of what its makers are paid. It goes when your account goes. What a statement said you were owed stays, without your name on it.
• An expert you look after, if we name you its maven: that you do, and when. It lets you see the expert as we do. It goes when your account goes.
• A commission you pay for, if you pay us to build experts for you alone: the fee and the days it runs. It goes when your account goes.
• A record of administrative actions — who changed what, and when. It carries no addresses and no questions.

Your questions

Searching does not store your question. It is used to run the search and is then gone.

There is one way a question could reach us by mistake. Your AI can write to our editors. It does this when an expert is missing something, or when you tell it what an expert should change. It is told to write the subject, like “funding for kelp restoration”, and never your question. It is also told to show you what it wrote. If your question is in it, ask us and we delete every copy.

You can choose to send us one answer that went wrong. When you tell your AI an answer was wrong or badly put, it may ask to send us your question, its answer and what you said. It sends them only if you say yes. It takes out names, contact details and anything else that says who you are first. We also take out any email address it missed, and any phone number written with a +. We use it to make answers better, and delete it after 90 days.

We keep a note that a search happened. It says which sources were searched, how many results came back, how close the nearest one was, and how long it took. That note is how we find out which sources are missing. The question is not in it. It is linked to your account while you have one.

Our administrators can see how much each person uses it: on which days, how many look-ups, and which experts were read. We use that to decide what a licence should include. They never see what you search for, only a question you chose to send us.

If an organisation lets you in, its owners and admins see how many look-ups its people made this month and last. They see a month only once at least five people made a look-up in it. They are never shown yours. A look-up counts to the organisations you were in when you made it, shared between them if there were several. It stays counted, with no name on it, if you later leave or delete your account. An organisation with a licence sees the licence’s count instead, as the next paragraph says, however few people made it.

If you or your organisation has a licence, the note also says which licence it was counted to. That is how we count look-ups for the bill. Each month, a licence’s fee is shared between the experts its look-ups used. We check for look-ups that game that, such as one account making most of an expert’s. The check keeps no names. We email the licence holder when a month reaches 80% and 100% of what the licence includes. For an organisation, we email its owners and admins.

Your own AI also sees your questions, because you asked it. That is between you and whoever runs it, under the terms you have with them.

Who else handles it

We use six companies to run this. Each sees only what its job needs.

• Supabase — the database and sign-in. Servers in London.
• Vercel — runs the site.
• Resend — sends our emails: the sign-in link, the email saying you are in, the email saying how many look-ups a licence has used, and the link to confirm deleting your account. Sees your address. It also receives the newsletters our experts sign up to, and keeps them.
• Voyage AI — turns a question into numbers so it can be matched against the sources. Sees the question.
• Anthropic — reads the articles, scores them and writes the summaries. It reads a note you send our editors, to help them weigh it. If you sent one before 8 October 2026, it reads it only once we act on it. It also reads a question, its answer and what you said about it, when you chose to send them to us and we work on how answers are written or on what an expert holds. We never send it what you search for.
• Trigger.dev — runs the scheduled jobs that read the feeds.

What we never do

• We do not sell anything about you, and we do not advertise.
• We do not track you across other sites.
• We do not keep what you search for.

What the connector can reach

A connected AI reads the same sources you can read when you sign in, and nothing else. It cannot publish, delete or change anything. It cannot see your files, your email or anything else on your computer.

You approve it once, on a screen that lists the sources by name, and you can revoke it at any time on Add Nabu to your AI.

How long we keep it

What you search for: not at all. A question that reached us by mistake: until you ask us to delete it. An answer you chose to send us, with your question: 90 days. Your address, your memberships and your tokens: for as long as you have an account with us. A licence of your own: the same. A connector’s sign-in tokens expire on their own within thirty days.

A request to join: until we decide it, then ninety days, whether we said yes or no. A scrambled form of the internet address it came from: a day, so nobody can flood the form.

A link to invite somebody: until you take it back, or your account goes. A link to delete your account: an hour.

A newsletter one of our experts receives: its text for 180 days, unless the expert found it worth showing you. After that we keep only its subject and date.

Two things stay after you go, with you taken out of them. The note that a search happened. And the record that an administrative action happened, which names the action and not the person. We keep that record for a year. The record that your data was deleted we keep for good, so we can show that it was.

Something you told us to change is kept, without your name on it, until you ask us to delete it. Anything you asked us for goes with your account.

What you can ask for

A copy of everything we hold about you. A correction. Deletion.

On your account page you can download the copy and delete your account. Deleting asks you to confirm from your email first. You can also write to us, and we do it for you.

Deleting your account removes your address, your memberships and your tokens. The record that an administrative action happened stays, without you named in it. So does a record that an account was deleted, which does not hold your address.

Who to ask

privacy@ml.heynabu.ai. If you think we have got this wrong, you can also complain to your data protection regulator — in the UK, the Information Commissioner’s Office.