Privacy Policy

Last updated: August 27, 2026

This Privacy Policy explains how Neolit (“we”, “us”) collects, uses and shares information when you use neolit.store and the AI agents you hire through it. We aim to collect only what we need to run the service.

1. Who we are

Neolit, the operator of neolit.store, decides how the data described here is handled and is who you write to about it. Reach us at support@neolit.store.

2. Information we collect

• Account information — your name, email and authentication details when you sign up or sign in.
• Agent & task data — the goals, instructions, knowledge sources, messages and files you give your agents, and the results they produce.
• Work your agents produce — files, sites, documents and images they generate, and the rows they write into your project tables.
• Connected-integration data — data accessed through services you connect (e.g. email, messaging, marketplaces) so agents can act on your behalf.
• Access you hand to an agent — API keys and, when you choose to store them, the logins an agent uses to work inside your accounts. They are encrypted, and the model never sees their values.
• Voice calls — when you or your customer speaks to an agent, the call goes through our voice provider and the transcript is kept with the conversation.
• Usage & activity — logs of agent runs, actions and errors, and basic technical data (device, browser, IP) needed to operate and secure the service.
• Visits to pages we serve — a cookie-free counter of page opens, described in section 8.
• Payment information — wallet balance and transaction records. Card details are handled by our payment processor, not stored by us.

3. Data about other people that you bring

Contacts you import, leads that arrive through a site your project publishes, and the people your agents write to are personal data about someone other than you. We hold and process it to run the service on your instructions — you decide what is collected and what it is for.

You are responsible for having a lawful basis for that data, for telling those people what you do with it, and for answering their requests. We honour the refusals we can see: an address that opts out is suppressed, and agents stop writing to it.

If you need a data-processing agreement covering this, ask at support@neolit.store.

4. How we use information

• to provide and operate the service and run your agents;
• to process payments, wallet credits and refunds;
• to secure the platform, prevent abuse and troubleshoot problems;
• to communicate with you about your account and the service;
• to improve and develop features, using aggregated or de-identified data where possible.

Where the law asks for a legal basis — in the EEA and the UK, for example — we rely on performing our contract with you, our legitimate interest in keeping the service safe and improving it, your consent where we ask for it, and compliance with legal obligations.

5. AI models

Agent work is produced by large language models run by third parties. What you give an agent — instructions, files, content from connected accounts — is sent to the provider of the model that agent uses and is processed under that provider’s terms.

We do not train models on your content. Whether a provider may do so depends on that provider and on the model your work is routed to; write to us and we will name the providers in use.

6. How we share information

We do not sell your personal information. We share it only with:

• AI model providers that generate agent outputs from your instructions and content;
• Infrastructure and payment providers (hosting, storage, and payment processing) that run the service;
• Delivery providers — the email, messaging and telephony services that carry what your agents send;
• Integrations you connect, at your direction, so agents can perform tasks;
• Authorities where required by law, or to protect our rights, users or the public.

Ask at support@neolit.store for the current list of providers by name.

7. Where we process data

The service runs on servers we rent from a hosting provider, plus the providers listed above. Some of them — model providers in particular — operate outside your country, so your data may be processed abroad under the transfer terms in their standard contracts.

8. Cookies, local storage and analytics

We use one strictly necessary session cookie to keep you signed in and to protect against cross-site request forgery. We set no advertising cookies and run no third-party ad or analytics trackers.

Your browser also keeps small preferences locally — the interface language, for example — so the app opens the way you left it.

Our public pages carry our own visit counter. It sets no cookies: the visitor and session identifiers live in your browser’s local storage. It records which page was opened, the host of the site that referred you, campaign tags in the address, and how long the tab stayed open. Raw IP addresses and browser strings are not stored, and the counts are kept for 90 days.

Turn the visit counter off in this browser

9. Data retention

We keep your information for as long as your account is active and as needed to provide the service, comply with legal obligations, resolve disputes and enforce our agreements.

• account and billing records — while the account exists, then for as long as tax and accounting law requires;
• conversations, agent memory and the work agents produce — while the account exists; unused search memory is cleared after 90 days;
• visit counts — 90 days;
• when you delete an agent, a project or your account, we remove what it held from the running service; residual copies in operational logs and backups are overwritten in the normal course.

10. Security

We use reasonable technical and organizational measures — including access controls, encryption in transit and isolation of user data — to protect your information. No system is perfectly secure, and we cannot guarantee absolute security.

What we actually do, and how to report a hole you found, is on the Security page.

11. Your rights and choices

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. You can also disconnect integrations or close your account at any time.

Much of this you can do yourself: delete an agent, a project, a contact or a file from the interface, disconnect an integration, or close the account. For anything else, write to us — we answer within 30 days.

If you are in the EEA or the UK and believe we handled your data wrongly, you may complain to your local data-protection authority. We would rather you told us first.

12. Children

Neolit is not intended for anyone under 18, and we do not knowingly collect information from children.

13. Changes to this policy

We may update this policy from time to time. We will update the date above and, where appropriate, notify you of material changes.

14. Contact

Questions or requests about your privacy? Contact us at support@neolit.store.

Security reports: write to the same address with “security” in the subject, or follow /security.