Privacy Policy
If you have any questions or feedback, please email us at info@brevilabs.com!
TLDR
- We collect server-side telemetry and usage data to improve our AI features. This may include prompts and agentic actions calls to our backend.
- We use various AI providers (including but not limited to OpenAI, Google Gemini, Jina AI, Voyage AI) to process your requests.
- Your data is processed through our backend to ensure stability and performance of the service.
- We use anonymized data to improve our AI models and services.
Important Note
- Even if you use your own API key, your requests will still go through our backend! That's where we do our agentic orchestration to ensure the stability and performance of the service.
Last updated 2025-01-23
Introduction
This privacy policy ("Privacy Policy") applies to all users of the Copilot Plus for Obsidian plugin (collectively, "Copilot Plus," "Plugin" or "Service"), which is offered by Brevilabs Inc. and/or any of its affiliates ("Brevilabs" or "we" or "us") and describes how we process your personal information in connection with the Service, and how we collect information through the use of cookies and related technologies. It also tells you how you can access and update your personal information and describes the data protection rights that may be available under your country's or state's laws. Please read this Privacy Policy carefully. By using the Plugin, you acknowledge you have been informed of and consent to our practices with regard to your personal information and data.
Applicability of this Privacy Policy
If you are a customer of Brevilabs, this Privacy Policy does not apply to personal information or other data and information that we process on your behalf (if any) as your service provider (collectively, "Customer Data"). Our use of your Customer Data shall instead be governed by the terms and conditions of the separate customer agreement or terms of service that you have agreed to with us.
If you are using the Services as an employee, contractor or other representative of one of our customers and you have any questions about our privacy practices or would like to exercise any rights with respect to your personal information that we process on behalf of our customers, please contact the corresponding customer as we only process your personal information in our capacity as a service provider to our customer.
Personal information we collect
You may choose to interact with our Plugin in ways that provide us with your personal information. The amount and type of information that Brevilabs gathers depends on the nature of your interaction with us, as well as the amount of information you choose to share. For example, we ask visitors who use our community Discord to provide a username and email address. We will also collect the information you provide with us in connection with creating an account on the Plugin. In each case, Brevilabs collects such personal information only insofar as is necessary or appropriate to fulfill the purpose of your interaction with or your request to Brevilabs.
When you use our Plugin, we collect:
- Account information (email, username)
- Server-side usage data and telemetry to improve our AI features
- Prompts and requests sent to our AI services
- Technical information about your device including your device's internet protocol (IP) address
We collect this information to better understand how users use our Plugin, to improve our services, and to monitor the security of the Plugin.
Like most website operators, Brevilabs collects (i) technical information about your device including your device's internet protocol (IP) address, device type (e.g., phone, tablet), unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 4G), and general location information such as city, state or geographic area; and (ii) information about your visit to our Apps and online activity data (such as the referral URL, the content viewed and the content interacted with). Some of this information is collected using cookies, web beacons and related local storage technologies. See below for further information on these technologies. We collect this information to better understand how visitors use our Apps, to improve our Apps and experience for visitors, and to monitor the security of the Apps.
We may aggregate all information (including your personal information) collected from our Apps for our own statistical and analytics purposes and share such aggregated information with third parties for our own promotional purposes (e.g. by publishing a report on trends in the usage of our Apps).
Important Note Regarding Data Processing with Your Own API Key:
Even if you choose to use your own API key for certain AI providers, please be aware that your requests will still be routed through our backend infrastructure. This is necessary for agentic orchestration, service stability, performance optimization, and security. Therefore, even when using your own API key, we will still collect and process the categories of personal information described in this section.
Note on Server-Side Usage Data and Telemetry
"Server-side usage data and telemetry" means that we collect data related to the operation and usage of the Copilot Plus service on our backend servers. This data is primarily focused on system performance, error monitoring, and overall service usage patterns. We do not collect client-side telemetry, which would violate Obsidian Developer policies.
Information Brevilabs does not collect
Brevilabs does not intentionally collect sensitive or special category personal information, such as genetic data, biometric data for the purposes of uniquely identifying a natural person, health information, or religious information.
Brevilabs does not knowingly collect information from or direct any of our Plugin or content specifically to children under the age of 18. If we learn or have reason to suspect that a user is under the age of 18, we will close that account.
Lawful basis and purposes for processing your personal information
If you are an individual in the United Kingdom or European Economic Area (EEA), we collect and process information about you only where we have legal bases for doing so under applicable United Kingdom and/or EU laws. The legal bases depend on the Services you use and how you use them. This means we collect and use your information only where:
To fulfil a contract or take steps linked to a contract with you We use your personal information to:
- administer access to your accounts;
- provide our AI-powered services and send you service related communications;
- provide you with customer support.
Legitimate interests We use your personal information:
- to improve and personalize your experience with our Plugin;
- to understand how you use our Plugin and to develop new features and functionality;
- to monitor and improve the performance of our services for administrative, security and fraud prevention purposes;
- to enforce compliance with our terms of use and other policies;
- to provide information about our Services;
- to respond to your requests, questions and feedback;
- to comply with applicable laws, lawful requests, and legal process.
Consent We may rely on your consent:
- where you have expressly indicated to us your consent to the processing of your personal information;
- where we have obtained your consent to process your content through AI services;
- on other occasions where we ask for your consent, for the purpose we explain at the time.
You may withdraw your consent at any time by contacting us at info@brevilabs.com.
How Brevilabs uses and protects your personal information
Sharing your information
Brevilabs may share your personal information with the third-parties listed below for the purposes that are described in this Privacy Policy or otherwise with your consent.
Brevilabs only shares your personal information with those of its employees, contractors, and affiliated organizations that (i) need to know that personal information in order to process it on Brevilabs's behalf or to provide services available on the App, and (ii) that have agreed not to disclose it to others.
Brevilabs may disclose your personal information to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us.
Brevilabs may sell, transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution. In such a case, we will make reasonable efforts to require the recipient to honor this Privacy Policy.
Service Providers and partners. Brevilabs engages the following service providers who will handle your personal information:
- OpenAI - AI processing
- Google Gemini - AI processing
- Jina AI - AI processing
- Voyage AI - AI processing
- Discord - community platform
Our service providers and partners are required by contract to safeguard any personal information they receive from us and are prohibited from using the personal information for any purpose other than to perform the services as instructed by Brevilabs.
Legal Requirements. We may disclose personal information to government authorities or other third-parties if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a subpoena, court order or similar legal obligation, (b) protect and defend our rights or property, (c) act in urgent circumstances to protect the personal safety of users of any App or the public, (d) protect against legal liability, (e) to investigate fraud or other unlawful activity, or (f) or as otherwise required or permitted by law.
Brevilabs takes measures reasonably necessary to protect your personal information against any unauthorized access, use, alteration, or destruction.
Cross-border transfer of personal information
The Plugin's backend services are hosted in the United States and the personal information we collect will be stored and processed on our servers in the United States. Additionally, our AI service providers (OpenAI, Google Gemini, Jina AI, and Voyage AI) may process your data in various locations according to their respective privacy policies. Our employees, contractors and affiliated organizations that process information for us as described above may be located in the United States or in other countries outside of your home country which may have different data protection standards to those which apply in your home country.
Where your personal information is transferred outside of the EEA, Switzerland and UK and where this is to a country which is not subject to an adequacy decision by the EU Commission or considered adequate as determined by applicable data protection laws, we will take steps to ensure your personal information is adequately protected by safeguards such as Standard Contractual Clauses ("SCCs") approved by the EU Commission or by the UK Government. A copy of the relevant mechanism can be obtained for your review on request by using the contact details in the 'Contacting Brevilabs About Your Privacy' section of this Privacy Policy.
Brevilabs communications with you
If you are a registered user of the Plugin and have supplied your email address, Brevilabs may occasionally send you an email to tell you about security, system information, new features, solicit your feedback, or just keep you up to date with what's going on with Brevilabs and our products. We primarily use our Discord server to communicate this type of information, so we expect to keep this type of email to a minimum. You can email us at info@brevilabs.com to stop receiving such emails at any time.
Data retention and deletion
If you already have an account for the Plugin, you may access, update, alter, or delete your basic user profile information by accessing your account settings within the Plugin.
Brevilabs will retain your information for as long as your account is active or as needed to perform our contractual obligations, provide you services through the Plugin, to comply with legal obligations, resolve disputes, preserve legal rights, or enforce our agreements.
We retain:
- Account information for as long as your account is active
- Usage data and telemetry in anonymized form for service improvement
- AI interaction logs for a limited period to ensure service quality and security
You can request deletion of your account and associated data by contacting us at info@brevilabs.com. Please note that some information may be retained for legal or technical reasons even after account deletion.
Your choices
In this section, we describe the rights and choices available to all users.
Opt out of marketing communications. You may opt out of marketing-related communications by emailing us at info@brevilabs.com.
AI Processing. While using the Plugin, you can:
- Choose which AI providers to use
- Use your own API keys for certain providers
- Control what content is sent to AI services
Please note that even when using your own API keys, requests are still processed through our backend to ensure service stability and security.
Cookies. Most browser settings let you delete and reject cookies placed by websites. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, you may not be able to use all functionality of the website and it may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.
Online tracking opt-out. There are a number of ways to opt out of having your online activity and device data collected through our website, which we have summarized below:
- Blocking cookies in your browser. Most browsers let you remove or reject cookies, including cookies used for interest-based advertising. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit allaboutcookies.org.
Use the following links to learn more about how to control cookies and online tracking through your browser:
-
Blocking advertising ID use in your mobile settings. Your mobile device settings may provide functionality to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.
-
Google Analytics. We use Google Analytics to help us better understand how people engage with our Services by collecting information and creating reports about how users use our Services. For more information on Google Analytics, click here. For more information about Google's privacy practices, click here. You can opt out of Google Analytics by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout.
-
Using privacy plug-ins or browsers. You can block our Services from setting cookies used for interest-based ads by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, DuckDuckGo, Ghostery or uBlock Origin, and configuring them to block third party cookies/trackers.
-
Platform opt-outs. Some third-party ad networks, including third-party ad servers, ad agencies, ad technology vendors and research firms, allow you to opt-out directly by using their opt-out tools. Some of these providers, and links to their opt-out tools, are:
-
Advertising industry opt-out tools. You can also use these opt-out options to limit use of your information for interest-based advertising by participating companies:
Do Not Track. Some Internet browsers may be configured to send "Do Not Track" signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.
Global privacy practices and your rights
Information we collect may be stored and processed in the United States in accordance with this Privacy Policy but we understand that users from other countries may have different expectations and rights with regard to their privacy. For all Plugin users, no matter their country of location, we will:
- provide clear methods of unambiguous, informed consent when we do collect your personal information and where required by applicable law;
- only collect the minimum amount of personal information necessary for the purpose it is collected for, unless you choose to provide us more;
- offer you simple methods of accessing, correcting, or deleting your information that we have collected;
- provide Plugin users notice, choice, accountability, security, and access, and we limit the purpose for processing.
Additional rights that may apply to you in certain instances:
- Right of data portability (if our processing is based on consent or a contract and the processing carried out by automated means);
- Right to withdraw consent at any time (if processing is based on consent)
- Right to object to processing (if processing is based on legitimate interests)
- Right to object to processing of personal data for direct marketing purposes
- Right of erasure of your personal data from our system ("right to be forgotten") if certain grounds are met
To exercise your privacy rights, you can email us at info@brevilabs.com.
Contacting Brevilabs About Your Privacy
The relevant data controller for any personal information processed in connection with our Plugin is Brevilabs Inc.
If you have any questions about this Privacy Policy or our privacy and security practices, or you wish to make a complaint about our compliance with applicable privacy laws, please feel free to contact us at info@brevilabs.com.
If you have questions or concerns about the way we are handling your personal information, or would like to exercise your privacy rights, please email us with the subject line "Privacy Concern" at info@brevilabs.com.
In most cases, we will respond within 30 days of receiving your message but please note for promptest response, we recommend emailing us.
Privacy policy changes
Brevilabs may change its privacy policy from time to time, and in Brevilabs's sole discretion.
If we make material changes to this Privacy Policy, we will notify you by:
- Updating the date of this Privacy Policy
- Posting a notice in our Discord server
- Displaying a notice within the Plugin
Your continued use of the Plugin after any change in this Privacy Policy will constitute your acceptance of such change.
Open Source Components
The frontend of our Plugin is open-source and licensed under AGPL-3.0. While the frontend code is publicly available, our backend services and AI orchestration layer remain proprietary. Any contributions to the open-source components of our Plugin are subject to the terms of the AGPL-3.0 license.