Hey Nabu

Privacy

What we store, why, and how to get rid of it.

What we store about you

• Your email address. It is how you sign in. There is no password — we send a code to your address instead. We never ask for a card, a password or an API key.
• Which organisation you belong to, and whether you are an owner, an admin or a member.
• Your invitation, if somebody invited you: your address, who sent it, and when you accepted.
• Tokens you make, for connecting something that cannot open a browser. We store the name you gave it and a one-way hash. We cannot read the token back, which is why it is shown once.
• Anything you ask us to cover. If your Claude tells us a subject is missing, or you ask for a corpus of your own, we keep what was said and why. That is sent to us on purpose, and it is the one piece of writing of yours we hold. Ask us and we delete it.
• A record of administrative actions — who changed what, and when. It carries no addresses and no questions.

Your questions

We do not store them. Your question is used to run the search and is then gone. There is no place in our database that could hold one.

We keep a note that a search happened. It says which sources were searched, how many results came back, how close the nearest one was, and how long it took. That note is how we find out which sources are missing. The question is not in it.

Your own Claude also sees your questions, because you asked it. That is between you and whoever runs it, under the terms you have with them.

Who else handles it

We use six companies to run this. Each sees only what its job needs.

• Supabase — the database and sign-in. Servers in London.
• Vercel — runs the site.
• Resend — sends the sign-in email. Sees your address.
• Voyage AI — turns a question into numbers so it can be matched against the sources. Sees the question.
• Anthropic — reads the articles, scores them and writes the summaries. It is not sent your questions by us.
• Trigger.dev — runs the scheduled jobs that read the feeds.

What we never do

• We do not sell anything about you, and we do not advertise.
• We do not track you across other sites.
• We do not read your questions. We keep nothing to read.

What the connector can reach

A connected Claude reads the same sources you can read when you sign in, and nothing else. It cannot publish, delete or change anything. It cannot see your files, your email or anything else on your computer.

You approve it once, on a screen that lists the sources by name, and you can revoke it at any time on Add to Claude.

How long we keep it

Your questions: not at all. Everything else: for as long as you have an account with us.

What you can ask for

A copy of everything we hold about you. A correction. Deletion. Write to us and we do it — there is no form to find, and no button that does it quietly in the background.

Deleting your record removes your address and your memberships. The record that an administrative action happened stays, without you named in it.

Who to ask

privacy@heynabu.ai. If you think we have got this wrong, you can also complain to your data protection regulator — in the UK, the Information Commissioner’s Office.