Legal

Privacy Policy

Last updated October 14, 2026. This policy is the publicly available privacy notice for Neoterum, including any Neoterum app on Meta platforms.

Who we are

Neoterum (“Neoterum,” “we,” “us”) provides an AI workforce discovery product at https://neoterum.com. We find AI agents, LLM calls, and API keys across systems you connect, then help you assign owners and identities.

For privacy questions or requests, email privacy@neoterum.com.

What this policy covers

This policy describes personal data we process when you visit our website, create an account, use Neoterum, connect third-party sources, or use a Neoterum app or login that runs on Meta (including Facebook and Instagram). It explains what we collect, how and why we use it, who we share it with, how long we keep it, and how you can ask us to delete it.

Personal data we collect

Account data. Email address, password (stored by our auth provider, not in plaintext), display name, organization name, role, and invite records.

Usage and device data. Pages viewed, sign-in time, browser type, approximate location from IP, and diagnostic logs needed to operate the service.

Workspace and connector data you choose to sync. If an organization connects GitHub, AWS, Microsoft Entra, n8n, model providers (OpenAI, Anthropic, xAI), or telemetry, we process metadata those sources expose: repository and workflow names, author emails and logins, cloud workload names, IAM role names, environment-variable names (not secret values), OAuth app names and owners, API key names and usage counts, and similar inventory evidence. We do not collect prompt content, conversation payloads, or secret values.

Meta / Facebook data. If you use Facebook Login or otherwise authorize a Neoterum app on Meta, we may receive the data Meta shares with us under the permissions you grant. That typically includes your name, email address, and a stable Facebook user identifier. We only request permissions we need to create or link your Neoterum account. We do not collect your Facebook friends list, posts, photos, or messages unless a future permission screen expressly asks for them and you approve.

How we use personal data

We process personal data to:

  • Create and authenticate accounts, including Facebook Login if you choose it
  • Provide discovery, inventory, ownership, and identity features
  • Secure the service, prevent abuse, and debug failures
  • Communicate about the product, security, and account changes
  • Comply with law and enforce our terms

We use Meta data only to provide the Neoterum service you requested — for example signing you in and matching you to an organization. We do not sell personal data. We do not use Meta platform data to train independent AI models, and we do not use it for independent advertising without a lawful basis and a clear disclosure.

Cookies and similar technologies

We use cookies that are required to sign you in (session cookies from our auth provider) and, if you use demo mode, a short-lived cookie that marks the demo tenant. These cookies are necessary for the site to work. We do not use third-party advertising cookies on neoterum.com.

When we share data

We share personal data only with:

  • Processors that host the product, including Vercel (application hosting) and Supabase (authentication and database)
  • Sources you connect (GitHub, AWS, Microsoft, model providers, Meta) when the product calls their APIs on your behalf
  • Organization admins in your workspace, who can see membership and inventory for that tenant
  • Authorities if required by law, or to protect rights and safety

We do not sell personal data or share Meta user data with data brokers. If we ever use a new category of recipient, we will update this policy first.

Retention

We keep account and workspace data for as long as the organization uses Neoterum and for a short period afterward so we can restore a mistaken deletion or meet legal duties. Connector inventory is refreshed on each sync; stale copies are replaced. Logs are kept only as long as needed for security and reliability. Demo-mode data lives in memory and is not a production record.

Your rights and how to delete your data

You may request access to, correction of, or deletion of personal data we hold about you. You may also withdraw Facebook Login by removing Neoterum in Facebook’s settings.

To delete your Neoterum account and related personal data: email privacy@neoterum.com from the address on the account. Include “Delete my data” in the subject line and, if you used Facebook Login, your Facebook name or user ID. We will delete or anonymize your account, profile, and Meta-derived identifiers within 30 days, unless we must keep a limited record (for example a billing or security log) that the law requires.

To disconnect Meta without emailing us: open Facebook → Settings & privacy → Settings → Apps and websites → remove Neoterum. That stops new data from Meta. Email us if you also want copies we already stored removed.

Organization owners can disconnect a source at any time on the Connectors page. That stops new syncs from that source.

Meta platform terms

When we process data received from Meta, we also follow Meta’s Platform Terms and Developer Policies. We only use that data for the purposes described here. We do not transfer Meta user data to a third party except our processors, as required by law, or with your direction. If Meta notifies us of a user deletion request through a data-deletion callback, we will honor it the same way as an email request.

Children

Neoterum is a business product. It is not directed to children under 13 (or the equivalent age of digital consent where you live). We do not knowingly collect personal data from children. If you believe a child provided data, email privacy@neoterum.com and we will delete it.

International transfers and security

We host the product on infrastructure that may process data in the United States and other countries. We use HTTPS, tenant isolation, and encrypted connector credentials. More detail is on our Security page. No method of transmission is perfectly secure.

Changes

We will post updates on this page and change the “Last updated” date. Material changes will be called out for a reasonable period. Continued use after an update means you accept the revised policy.

Contact