Most privacy policies are long because the company does a lot with your data. Ours is short because we don't. … was built so that your conversations physically cannot reach us — the AI runs on your own graphics card, and everything it knows lives on your own disk.
What we collect
Nothing, by default.
- No telemetry. The app does not phone home with usage data, crash reports, or statistics.
- No accounts. There's no sign-up and no login. Sevelle does use the licence ID from your purchase to activate and to confirm your licence is valid — that's the only identifier, it's tied to your order, and the check never carries anything about your conversations.
- No analytics. Not in the app, and not on this website. No tracking pixels, no ad networks, no third-party analytics scripts.
- No chat access. Your conversations are processed on your GPU and saved only on your PC. They are never transmitted to us or anyone else.
Where your data actually lives
Everything … creates stays on your computer, in places you can open yourself:
- Chat history — stored locally in your Windows app-data folder (
%LOCALAPPDATA%\Sevelle). - Memory and knowledge files — plain Markdown text files in
Documents\Sevelle. You can read, edit, or delete them with Notepad. Deleting them is a complete deletion; there is no copy anywhere else. - The AI model — files on your disk. That's why the app works with the internet unplugged.
Choosing what is written down at all
Everything above describes files on your own disk. These are the controls over whether those files exist in the first place.
- Incognito. Turn it on for a conversation and nothing more is written to disk and nothing is added to memory. Anything already saved from that chat is deleted the moment you switch it on, and turning it back off starts a fresh conversation rather than writing down what came before. It ends when you close Sevelle — an incognito chat that survived a restart would have to be recorded somewhere to be remembered, which is the one thing it promises not to do. This is enforced by the part of Sevelle that writes files, not by the screen: the same refusal applies whether the request comes from a second window, from memory, or from a saved draft.
- Encrypt your conversations. Off unless you choose it, because plain readable files are what let you open your own history in Notepad. Turned on, your chats are locked to your Windows account through the Windows credential store. What that protects: another account on the same PC, or the drive read on another machine, cannot open them. What it does not: anything running as you while you are signed in, including Sevelle itself. It is not a password, and we would rather say so than let the word "encrypted" do work it has not earned. Note that a backup you make is written in plain form on purpose — the encryption key belongs to this Windows account and cannot leave it, so an encrypted backup would be one you could never restore.
- Everything we have on you, in one list. One screen showing every file Sevelle holds, where it is, how large it is, and what it is for — measured when you open it, not described from memory. Tick what you want gone and it goes. Your licence key and your own knowledge folder are deliberately not erasable from there, because erasing them is not what anybody means by "delete my data".
- Crash reports you read first. If something goes wrong, Sevelle writes a report on your machine. Before anything is sent you see the exact message, character for character, and its size in bytes. Nothing leaves your computer unless you press send. There is no conversation text in it, and your Windows username and temporary paths are replaced before it is written — but the whole thing is shown to you anyway, so you never have to take that on trust.
If you let Sevelle work with your files
Sevelle can look at files, change files, and run commands on your computer — but only if you switch those things on. They're all off when you install it, and each is a separate switch. Because this is about your computer rather than our servers, here is exactly what it does and doesn't mean:
- Nothing is uploaded. Files Sevelle reads are used by the AI running on your own machine. They are not sent to us, and we never see them, their names, or their contents.
- You pick what it can see. File reading and changing is limited to the folders you choose — or a single file, if that's all the job needs — for the chat you share them with. You can stop sharing any of them without closing the chat. Sevelle can't wander elsewhere through those features.
- You approve every action. Sevelle shows you what it wants to do and waits. Nothing happens until you click, and you can always say no.
- File changes can be undone. Anything Sevelle removes goes to your Recycle Bin, and there's an undo button for changes it made.
- Commands are different, and we won't pretend otherwise. If you turn on command running, a command you approve runs with your own permissions and can affect anything on your PC that you could — including outside your chosen folder. Sevelle refuses obviously destructive commands and flags ones that appear to reach outside your folder, but those checks are a help, not a guarantee. Commands can't be undone. Read them before you allow them, and leave this off if you'd rather not.
When the app touches the network
Exactly four cases, all in your control:
- Model downloads — when you pick an AI model in the setup wizard, the app downloads that file. Like any download, the file host sees a standard web request from your internet address. No chat content or personal data is sent.
- Update checks — the app fetches a small public file that says what the newest version is. The request contains no personal data and nothing about you is recorded by us.
- Licence check — to activate, and then when the app is online, Sevelle sends your licence ID and asks whether that licence is still valid. That's it — just the ID. No chat content, no personal data, nothing about what you do in the app. A licence that's been refunded or cancelled is deactivated this way; a valid one keeps working, and the check fails safe if our server can't be reached.
- Feedback — opt-in, and the only thing ever sent to us. Details below.
Feedback: the one exception, spelled out
If — and only if — you open the feedback form in the app and press Send, we receive exactly this:
- The feedback type you picked (for example "Bug" or "Idea")
- The message you typed
- Your email address — only if you chose to type one (so we can reply); leave it blank and the feedback is anonymous
- The app version (so we know which release you're on)
- Your Windows version string (for example "Windows-11-…")
- Your graphics card's memory size in GB (so we can reproduce hardware issues)
- The time you sent it
That is the complete list. No chat content, no files, no machine identifiers. A copy is also saved to a plain-text file on your own PC so you can see exactly what was sent.
Never touch the feedback form, and nothing is ever sent. We use feedback solely to fix bugs and improve the product, we don't share it with anyone, and if you included an email you can ask us to delete your feedback at any time.
Purchases
Payment is handled by Stripe, a payment processor, on their systems. We never see or store your card number. Stripe gives us your email address and receipt details so we can deliver your download link and honor refunds — that's the only personal information a purchase gives us, and we use it for nothing else. Stripe's own privacy policy governs the payment itself.
This website
This site is static pages — no cookies, no analytics, no trackers. Your theme choice (dark or light) is saved in your own browser's local storage and never leaves it. Our hosting provider (Cloudflare) keeps standard, short-lived server logs to run the service, as every host does.
Children
… is a general-purpose tool sold to adults. We don't collect data from anyone, children included.
Changes
If this policy ever changes, we'll update this page and the date at the top. Since we collect nothing, we expect changes to be rare and boring.
Questions
Email [email protected]. A human reads it.