Privacy Policy

What This Policy Covers

This policy describes how Neither ("we", "us", "our") collects, uses, and protects your information when you use our application at neither.online. Neither is a management intelligence platform that imports documents, emails, and messages from connected services to help teams make better decisions.

Information We Collect

Account information. When you sign up, we collect your email address and name via Supabase Auth. If you sign in with Google, we receive your name, email, and profile picture from your Google account.

Connected service data. When you connect third-party services (Google Drive, Gmail, Microsoft OneDrive, Outlook, Slack, Teams, or messaging platforms), we access data from those services based on the permissions you grant. This includes:

• Google Drive: file metadata and document contents from folders you select
• Gmail: email threads and metadata from labels you select
• OneDrive/SharePoint: file metadata and document contents
• Outlook: email threads and metadata
• Messaging platforms: message content from channels or conversations you connect

Usage data. We collect basic usage information such as pages visited and features used, to improve the product.

How We Use Your Information

• To provide the core service: importing, analyzing, and organizing your documents and communications into actionable project intelligence
• To generate AI-powered briefs, suggestions, and decision support using the content you import
• To maintain and improve the platform
• To communicate with you about your account or service updates

We do not sell your data. We do not use your data for advertising. We do not use your content to train AI models.

Google User Data

Neither's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we only use Google user data to provide the features you explicitly request (importing Drive files or Gmail threads into your workspace). We do not use Google data for advertising, and we do not transfer it to third parties except as necessary to provide the service (see "Third-Party Services" below).

Third-Party Services

We use the following services to operate Neither:

• Supabase — database hosting and authentication (PostgreSQL, SOC 2–aligned)
• Railway — application hosting (US/EU regions)
• Nango — OAuth connection management for third-party integrations
• OpenAI — AI processing under a Data Processing Agreement; your data is not used to train their models

These services process your data solely to provide Neither's functionality. We do not share your data with any other third parties.

Data Security

All data is encrypted with TLS 1.3 in transit and AES-256 at rest. Every workspace is isolated with row-level security (RLS) policies — no cross-workspace access is possible. See our Data & Security page for more detail.

Data Retention

Your data is retained as long as your account is active. Raw uploaded files are processed and not retained after extraction — we keep only the structured data. When you delete your account or data, it is removed within 30 days (backup retention window).

Your Rights

You can at any time:

• Access the data stored in your workspace
• Export your data
• Delete specific items or your entire workspace
• Disconnect any third-party integration, which stops further data access
• Delete your account, which removes all associated data

To exercise any of these rights, use the in-app settings or contact us at the email below.

Changes to This Policy

If we make material changes, we will notify you via the email associated with your account. Continued use of Neither after changes constitutes acceptance.

Contact

For privacy-related questions or requests, email us at privacy@neither.online.