★ Trust ★

Security & Your Data

A plain-English summary for businesses buying our software. It covers where your data goes, who owns it, how long it stays, and which AI providers touch it. The Privacy Policy and Terms of Service are the binding versions.

Last updated: September 17, 2026

Neato_Frontline

An AI voice agent that answers and places phone calls, takes calls from a website button, and can send texts.

Where it's stored: On a Neato-operated server hosted by DigitalOcean in New York (NYC3). Call transcripts, summaries, contacts, documents and any recordings stay there. Your account's records are separated from every other account's.
Is it recorded: Not by default. Call recording is a setting you turn on. Transcripts are saved for every call.
Who owns it: You do. Recordings, transcripts and caller details belong to your business. We process them on your behalf to run the service.
How long it's kept: Until you delete it or ask us to. You decide how long to keep call data. To delete your whole account or export all calls, email privacy@neatoventures.com.
Where it goes: Twilio carries the phone calls and texts. Google Gemini handles the live conversation. OpenAI or Google Gemini (your account's setting) writes call summaries and scores. OpenAI turns your uploaded documents into searchable passages. If you connect them, Nylas reaches your calendar and Resend sends confirmation emails.
Model training: Neato Ventures does not train AI models on your calls. The AI providers' own data-use terms apply to the audio and text sent to them.

Neato_Council

An AI persona that joins Zoom, Google Meet or Microsoft Teams meetings as a named participant and remembers what it learns.

Where it's stored: Personas, transcripts, summaries, documents and long-term memory sit on a Neato-operated server hosted by DigitalOcean. Sign-in is handled by Supabase. Every record is tied to your account, and queries return only your account's data.
Is it recorded: Yes. The meeting bot, run by MeetingBaaS, records the meeting, and MeetingBaaS holds that recording. You play it back through links that expire. The persona joins as a visible, named participant, and you are responsible for telling the people in the meeting that an AI is attending.
Who owns it: You do. We process your meetings, documents and memory on your behalf to run the service.
How long it's kept: Until you delete it. You can delete personas (which deletes their memory), documents, and individual memories in the dashboard. To delete your account or export all meetings and memory, email privacy@neatoventures.com.
Where it goes: Google Gemini hears and speaks in the live meeting. Anthropic Claude writes summaries, answers memory questions and helps decide when the persona should speak. OpenAI turns your documents into searchable passages. If you supply your own Anthropic or OpenAI key, those calls run on your account with that provider.
Model training: Neato Ventures does not train AI models on your meetings. The AI providers' own data-use terms apply to the audio and text sent to them.

Neato_Prompt

A web app at neatoprompt.com that turns a short task description into a structured prompt.

Where it's stored: Your account, profile and saved prompts are stored in Supabase. The app itself is served by Vercel. Database rules return only your own data to your account.
Is it recorded: Nothing is recorded. The prompts you generate are saved to your account so you can find them later.
Who owns it: You do. Your task descriptions, interview answers and generated prompts are yours to use.
How long it's kept: Saved prompts stay in your account until you delete your account. Account deletion and bulk export are done on request: email privacy@neatoventures.com.
Where it goes: Google Gemini receives your task description, category choices and interview answers to write the prompt. It does not receive your name or email. Stripe handles payments on its own pages. Resend sends account emails. PostHog records product usage events without prompt text. Sentry receives error reports. Meta Pixel measures sign-ups and purchases from our ads.
Model training: Neato Ventures does not train AI models on your prompts. Google's own data-use terms apply to the text sent to Gemini.

Call recording and AI disclosure

If you turn on call recording in Neato_Frontline, you are responsible for giving callers any notice and getting any consent the law requires. Some US states require every party on a call to consent. We provide a greeting you can set to announce the recording.

You can also have the agent tell callers it is an AI. Some states require that disclosure, and you are responsible for meeting the rules where you and your callers are.

What you're signing

Term: you pay monthly or yearly, as your agreement sets out, and it renews until you cancel.
Cancelling: cancel any time. It takes effect at the end of the period you've already paid for.
Setup: your first setup is built with you. Any setup cost is quoted in writing before you commit.
Your phone number: if you connect a number you already own, it stays yours. Before you go live we show you exactly how it's connected, and how to point it back to your own phones.
Your data on the way out: ask, and we export your data before we delete it.
When it can't handle a call: Neato_Frontline hands the call to a real person with the conversation attached. You tell us which calls should always go to a person, and we set it up that way.

This is a plain-English summary. Your signed agreement and our Terms of Service are what govern, and if anything here differs from them, they win.

What we don't claim

Neato_Frontline is not HIPAA compliant. Neato Ventures does not sign business associate agreements (BAAs) at this time. Do not use our products to collect or store protected health information.
We hold no SOC 2, ISO 27001 or other third-party security certification.
We do not offer single sign-on, a choice of data region, or multi-region failover today.

Questions

Security reviews, data requests and anything else about your data: email privacy@neatoventures.com.