1. Who is responsible for the data

The personal data operator is [to be filled in] (taxpayer number INN [to be filled in], registration number OGRNIP [to be filled in]), address: [to be filled in]. Send questions about your data to [to be filled in].

This policy applies to the website, the web chat and the NEO app for Mac.

2. What data we collect

  • Account: name, email and password. The password itself is not stored: only its hash (scrypt) is stored, and the password cannot be recovered from it.
  • Profile: your avatar if you uploaded one, your instructions for NEO if you wrote any, your plan and the date you registered.
  • Chats: your messages, NEO’s answers, the sources found, uploaded and generated images. For a long chat, NEO writes a short summary of older messages so that it remembers the conversation.
  • Consent: when you agreed at registration, and to which version of the documents.
  • Usage counts for limits: how many requests you sent and how many tokens you used. These are numbers only, with no text.
  • Safety flags: if a message fails the check, we record the category of the violation and the time. The text of the message is not included in the flag.
  • Mac app: a record of the connected device and an access key to your account.
  • IP address: only to limit overly frequent requests, such as password guessing. It is stored as a hash for about two days.

We do not collect bank card details: there are no payments yet. We do not use analytics, advertising trackers or error-tracking services.

We do not ask for data about your health, views, religion or other special categories of data. Please do not write them in the chat. If you do, they are processed only as part of the chat, so that NEO can reply.

3. Why, and on what legal basis

  • To create your account, let you sign in and store your chats — under the agreement (Terms of Use) and your consent.
  • To reply to your messages using AI models — under the agreement and your consent.
  • To count limits and protect NEO from abuse and hacking — under the agreement and to protect the rights of users and our own.
  • To answer your requests and meet legal requirements — under the law.

The safety check runs automatically and may stop NEO from answering a request. It has no other effect on your rights. You can write to us if you think the check got it wrong.

4. What we do with the data

Collection, recording, systematization, accumulation, storage, updating, retrieval, use, transfer (provision, access), blocking, deletion and destruction. Processing is automated: it is carried out by software on our servers.

5. Who we share data with

  • OpenRouter, Inc. (USA) — the service through which requests to AI models and web searches go.
  • Companies whose models write the answers: OpenAI and Anthropic (USA), DeepSeek and Z.ai (China). The answer to a particular request is written by the model chosen by you or by NEO.
  • Hosting: [to be filled in] — the company on whose servers in Russia NEO runs and the database is stored.

The models receive what is needed for an answer: the chat text, images, your instructions, the short summary of older messages and the internal chat ID. Your email, name and password are not passed to the models.

When NEO researches a topic, the websites are opened by the NEO server. Those websites see our server’s address, not yours.

Providers process data under their own rules and may store requests temporarily, for example to protect against abuse.

We do not sell data and do not show ads.

6. Transfer of data abroad

So that NEO can answer, the content of the chat is transferred to the USA and China. These countries may not have data protection equal to Russia’s. The transfer follows the rules of Article 12 of Law No. 152-FZ and takes place after notifying Roskomnadzor (the Russian data protection authority). We transfer only what is needed for an answer and do not transfer your email, name or password.

7. Where and how long data is stored

  • Account, profile, usage counts, safety flags: for as long as the account exists.
  • Chats: until you delete them. You delete a single chat from its menu in the chat list, and all chats in the “Account → Data” section.
  • Website sign-in: 30 days from your last sign-in, after which you need to sign in again.
  • IP addresses: as a hash, for about two days.
  • After you withdraw consent or ask us to delete your account: we stop processing and destroy the data within 30 days, unless the law requires us to keep it longer.

Account data and chats are stored in a database on servers in Russia.

8. Cookies and data in your browser

  • neo_web_session — keeps you signed in for 30 days. We store only a hash of this key.
  • neo-lang — remembers the site language for a year.
  • Interface settings, such as the sidebar width, are stored in your browser and never reach us.

There are no other cookies. There are no advertising or analytics cookies.

9. The Mac app

The app’s chats, files, history and attachments are stored on your Mac, in the ~/Library/Application Support/Neo folder. They do not reach us.

When you give the agent a task, the request goes through the NEO server to OpenRouter and to the company whose model answers. The request may include the conversation, file contents, command output and screenshots, if the task needs them. The NEO server does not store the content of these requests: only the number of requests and tokens, for limits.

The access key to your account is stored in the macOS keychain. The built-in browser keeps its cookies and website sign-ins only on your Mac. If you type text rather than a website address into the browser’s address bar, it is sent to Google search.

Deleting a chat in the app may leave its working files on disk. To delete everything, delete the app’s folder.

10. Your rights

  • Find out what data of yours we process and how, and receive it.
  • Correct inaccurate data. You can change your name, avatar and instructions in your account.
  • Ask us to block or destroy data if it is incomplete, out of date, unlawfully obtained or no longer needed.
  • Withdraw your consent to processing.
  • Complain to Roskomnadzor or to a court.

Write to [to be filled in] from the address given in your account, or send a letter to [to be filled in]. We will reply within 10 working days. If more time is needed, the deadline may be extended by another 5 working days: we will tell you the reason.

11. How we protect data

  • The website runs over HTTPS.
  • Passwords and sign-in keys are stored only as hashes.
  • The sign-in cookie is not accessible to scripts on the page.
  • Only we have access to the server and the database.
  • Model providers receive only what is needed for an answer.

12. Age

NEO is intended for people aged 18 and over. If we learn that an account was created by a child, we will delete the account and its data.

13. Changes to this policy

A new version is published on this page. Its date is shown at the top. If the changes require new consent, we will ask for it separately.