NepsezAI

Privacy Policy

Last updated: July 5, 2026

This Privacy Policy explains what data NepsezAI (the “Service”) collects, how we use it, and the choices you have. By using the Service you agree to this policy.

1. Data we collect

  • Account data. If you sign in with Google, we receive your email address, name, and profile identifier.
  • Chat & usage.Messages you send to the AI, generated responses, and derived preferences (“memories”) for signed-in users. Anonymous chats are ephemeral and are not stored.
  • Anonymous identifiers. For not-logged-in users we set a signed cookie and store a one-way hash of your IP address to enforce usage limits and prevent abuse. We do not store raw IP addresses.
  • Technical data. Standard logs needed to operate and secure the Service.

2. How we use data

  • provide, personalize, and improve the Service;
  • generate AI responses and portfolio analytics;
  • enforce usage limits and protect against abuse and fraud;
  • send alerts and notifications you have enabled;
  • comply with legal obligations.

3. Third-party processors

To operate the Service we share the minimum necessary data with providers acting on our behalf, including AI/LLM providers (for generating responses), authentication (Google), and hosting/infrastructure. Market data is retrieved from NEPSE and related sources. We do not sell your personal data.

4. Cookies

We use a signed, httpOnly cookie to identify anonymous sessions for usage-limit enforcement, and standard cookies/local storage to keep you signed in and remember preferences. Clearing cookies resets an anonymous session.

5. Data retention

We keep account and content data while your account is active or as needed to provide the Service. Abuse-prevention identifiers (hashed IP, counters) expire automatically, typically within 30 days. Anonymous chats are not retained.

6. Your choices

  • review and delete what the assistant remembers about you from Settings;
  • delete conversations and portfolio data you have added;
  • request deletion of your account by contacting us.

7. Security

We use reasonable technical and organizational measures to protect your data, including encryption of sensitive credentials at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children

The Service is not directed to individuals under 18, and we do not knowingly collect their data.

9. Changes

We may update this policy from time to time. Material changes take effect when posted with a revised “Last updated” date.

See also our Terms of Service.