Legal
Privacy Policy
Effective September 15, 2026
This policy explains what information Encevra collects, how we use it, and the choices you have. It applies to the Encevra platform, the Noetis analysis engine, and the Encevra API.
1. Who we are
Encevra AI is owned and operated by BCW & Company LLC, together with its subsidiaries. Encevra operates a brain-inspired analysis platform that helps businesses review complex documents and make consequential decisions. This Privacy Policy explains what information we collect when you use Encevra, the Noetis analysis engine, the Encevra API, and the customer portal (the "Service"), and how we use and protect it.
2. Information we collect
Account information: your name, email address, company name, and password (stored as a hash by our auth provider). Authentication data: sign-in sessions and tokens used to keep you signed in. Content you submit: documents, text, and attachments you upload for analysis. Usage data: the questions you ask, the runs you start, token and cost counts, API keys, and run history. Technical data: IP address, browser type, and basic request logs used for security and reliability. We do not collect more than is needed to run the Service.
3. How we use your information
We use your information to run analysis on your documents, return results and citations, manage your account and access, bill for paid plans and engine use, enforce rate limits and spending controls, keep runs isolated to your workspace, detect and prevent abuse, and provide support. We process your Content solely to deliver the analysis you request. We do not sell your personal data or your Content.
4. Document and analysis data
Your documents and analysis results are stored so you can review past runs, retrieve briefs, and restore conversations. Access is isolated by user and organization; other customers cannot see your documents, runs, or briefs. We retain run history, citations, and brief versions for as long as your account is active. When you delete a case or document, we remove the associated stored content, though retained run metadata may persist for billing and audit purposes. Uploaded text is treated as untrusted evidence for analysis, not as instructions to the models.
5. Model providers and processing
To run analysis, Encevra sends your questions and document text to language model providers through the Lovable AI Gateway and, where configured, through direct provider integrations. Your Content is transmitted to these providers for the purpose of generating the analysis you requested. We select providers and routing on the server and do not expose your API key or session to browser code. Provider failures and timeouts are handled with bounded retries; no provider receives more of your Content than is needed for the requested run.
6. We do not train on your content
Encevra does not use your documents or analysis results to train our own models. Where a model provider's terms permit training on inputs, we rely on your plan configuration and the provider's published data handling; contact us if you need confirmation of no-training terms for a specific provider.
7. Cookies and local storage
Encevra uses essential authentication storage to keep you signed in and to restore your session. We do not use advertising or cross-site tracking cookies. Authentication tokens and user preferences are stored in your browser and are cleared when you sign out. Server-side request logs do not track you across other websites.
8. Data security
Access to your data is enforced with row-level security tied to your authenticated user and organization. API keys are hashed before storage. Provider credentials are kept on the server. We apply timeouts, spending limits, and abuse detection to API and engine use. No method of storage or transmission is fully secure, but we apply measures appropriate to the sensitivity of analysis work. Report suspected incidents to security@encevra.com.
9. Data retention
We retain account and billing data for as long as your account is active, plus the period required by law for records. Run history and stored documents are retained while your account is active and removed when you delete them. If your account is closed, we delete your stored documents and results within a reasonable period, except for billing and security records we must keep.
10. Your rights
You can view, export, and delete the documents and runs in your workspace through the portal. You can close your account, which deletes your stored Content. Depending on your location, you may have additional rights under data protection law, such as the right to access, correct, or delete your personal data, or to object to processing. To exercise these rights, contact privacy@encevra.com.
11. International transfers
Encevra and its providers may process data in regions different from where you are located. When your data is transferred across borders, we rely on the provider's data transfer mechanisms. If you are in a region with specific transfer requirements, contact us for details.
12. Children
The Service is intended for business use and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data to us, contact privacy@encevra.com and we will remove it.
13. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use after the effective date means you accept the revised policy.
14. Contact
Questions about this Privacy Policy or your data can be sent to privacy@encevra.com. For security incidents, contact security@encevra.com.