Privacy at a glance
- We don't sell your data. Your personal information is never sold to third parties.
- Encrypted connections and keys. Traffic to Ntekuma uses HTTPS, and saved API keys and credentials are encrypted.
- You're in control. Delete your account from settings at any time, and contact us to access or export your data.
- Minimal collection. We only collect what's necessary to provide the service.
Data we collect
| Data type | What we collect |
|---|---|
| Account info | Email address, name and profile image, password hash or Google sign-in details, login metadata, authentication tokens |
| Usage data | Build activity, feature usage, logs, and preferences |
| AI key and usage | Your OpenRouter API key and any publisher API keys you add (both encrypted), and a record of some AI tasks, such as which model was used |
| Your content | Prompts, uploads, and generated files in your workspace, including documents you add to a project's knowledge, saved project memory, and the search index built from them |
| Writing samples | For documents you write: the finished text, a score for how natural each sentence reads, and the rewrites tried on it, with why each was kept or set aside. You can turn this off in Settings > Account |
| Payment info | Subscription status and a Stripe customer ID. Card details are entered on Stripe and are not stored by Ntekuma |
How we use your data
- Provide and operate the Ntekuma service
- Generate outputs based on your prompts and uploads
- Improve service quality and develop new features
- Train and evaluate Ntekuma's own writing models with writing samples, unless you turn this off in Settings > Account. Samples are used only for this; we don't publish or sell them
- Prevent abuse and ensure platform security
- Process billing and manage your account
- Communicate important updates and support
Data sharing & processors
We do not sell your personal data. We share data only with service providers that help run the platform. These providers process data to deliver their services to us:
- Hosting and storage: Vercel (web app and file storage), Railway (build workers), Neon (database), and Upstash (queues and caching)
- AI models: OpenRouter, which runs AI tasks on your own key. Google (Gemini) is used to check citations against sources and can draw storyboard images. OpenAI is used to index documents you add to a project's knowledge and saved project memory.
- Academic search: OpenAlex, Semantic Scholar, Crossref, Europe PMC, PubMed, and Unpaywall receive search queries based on your writing requests
- Publishers: Elsevier and Springer Nature, only if you add your own API key in Research sources. They receive the identifiers (DOIs) of articles the agent reads, with your key
- Web search: DuckDuckGo receives the agent's web searches, and websites the agent reads receive an ordinary page request
- Writing models: RunPod, which runs Ntekuma's own rewriting model on its GPUs and receives the paragraphs being rewritten
- Payments: Stripe
- Email: Resend
- Sign-in and integrations: Google, if you sign in with Google, and GitHub, if you connect a repository
Your rights
Depending on your location, you may have the following rights:
- Access: request a copy of your personal data
- Correction: update inaccurate information
- Deletion: request removal of your data
- Export: download your data in a portable format
- Objection: object to certain data processing
- Restriction: limit how we use your data
To exercise these rights, contact us at privacy@ntekuma.com.
Security & retention
Security measures
- HTTPS for all traffic to the app, with HSTS in production
- AES-256-GCM encryption at rest for saved OpenRouter keys and publisher credentials
- Other stored data is protected by the security controls of our database and storage providers
- Access controls and auditing
Data retention
- Active account data: while account exists
- Deleted account: your account record, the data linked to it, and your files in our storage (project files, avatar, storyboard images) are deleted when you delete the account. Provider backups may take longer to clear
- Writing samples: kept until you turn them off in Settings > Account or delete your account, which deletes them. Models already trained before then are not retrained to remove them
- Logs: kept for security and debugging, under our hosting providers' retention settings
- Legal holds: as required by law
Cookies
We use only essential cookies, to keep you signed in and to secure sign-in and account connections. We don't use advertising, analytics or tracking cookies. Our cookie policy lists each one and how long it lasts.
International transfers
Your data may be processed in multiple regions depending on provider infrastructure. We use contractual safeguards (Standard Contractual Clauses) and technical measures to protect data during international transfers.
Children's privacy
Ntekuma is not intended for children under 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately.
Policy updates
We may update this policy as our service evolves. Significant changes will be communicated via email or in-app notification. Continued use after changes constitutes acceptance.
Privacy questions
Contact our privacy team at privacy@ntekuma.com for any questions about this policy or your data.