Privacy in practice
What we collect, what the AI is allowed to read, and what our own staff can see. This page describes how the product behaves. It is not the legal policy.
Last reviewed 17 October 2026.
Your inbox: nothing before you connect it
- When you connect a mailbox, Nirvest starts from that moment. There is no historical backfill. Mail you received before you connected is never fetched, never read and never searched.
- New mail is hidden by default. A deterministic filter drops obvious noise — newsletters, receipts, notifications, bulk senders — without any AI involvement and without cost.
- What survives is classified from its metadata first. Only mail that looks investing-related — deal flow, portfolio updates, founder updates, introductions — becomes visible and has its body read.
- Everything else stays hidden. Nothing is deleted, and nothing is silently dropped: if the AI is paused, mail waits rather than disappearing.
- Outgoing mail shows only what you sent from Nirvest, or replies inside a thread that is already visible.
What the AI sees
- The AI is given the workspace data needed to answer the request in front of it, and nothing from another workspace.
- The AI has no access to our internal console, our audit log or our billing tables. That boundary is enforced in code, not by policy.
- Requests are sent to third-party AI providers to be answered. We do not sell your data, and there is no advertising in Nirvest.
What our staff can see
- Our internal console shows accounts, statuses, counts and billing — not your content. There is no screen in it that renders your emails, documents or notes. The exception is what you choose to send us yourself, such as a Contact Us message or a bug report with its screenshots.
- The AI usage log our staff can open shows routing and cost only. The stored record of a request keeps a short summary for debugging, and the internal console deliberately does not display it.
- Support mode is a 60-minute window on one workspace. It requires a written reason, is recorded in the audit log, and adds only fixed summaries, such as job statuses and mailbox sync status, never your emails, documents or notes.
Your control
- You can disconnect a mailbox at any time, which stops all further ingestion.
- You can close your workspace yourself in Settings. Our policy is to delete it on day 30, after reminders to every member, and any admin can cancel until then. This is being switched on in stages.
- Security logs and AI request logs are deleted after 12 months.
Being straight with you
- Deletion is not instant. Workspaces below 20 NT become read-only and are deleted after 30 days, as is a closed workspace; this is being switched on in stages. Copies in our providers' backups expire up to 30 days after that.
- You cannot yet choose the region your data is stored in.
- This page describes the product as it works today. Where it and the legal policy differ, the legal policy governs.