Envelope logoEnvelope

Privacy Policy

Effective Date: February 11, 2026 Last Updated: February 23, 2026

This Privacy Policy describes how Nesoi Group LLC ("we," "us," or "our") collects, uses, and shares information when you use the Envelope website and service located at https://envelope-beryl.vercel.app/ (the "Service"). Envelope allows users to turn any web app into an installable Progressive Web App (PWA), build apps from scratch using AI, and extend apps with built-in modules for notifications, authentication, data storage, and more. By using the Service, you agree to the collection and use of information as described in this policy.

Information We Collect

Information You Provide

When you create an account or use the Service, we may collect information that you voluntarily provide, including:

  • Account information such as your name, email address, and password when you sign up or sign in.
  • App configuration data such as the URLs, app names, icons, and theme colors you provide when creating PWA install links through the Service.
  • AI builder data such as chat messages, prompts, and custom system prompts you submit when building or configuring apps with the AI builder.
  • Module data such as key-value store entries, push notification content, uploaded or AI-generated images, and voice assistant interactions submitted through enabled modules.

Information Collected Automatically

When you or end users access the Service (including generated install pages), certain information may be collected automatically, including:

  • Usage analytics such as the number of visits and installs associated with each PWA link you create. These metrics are displayed in your dashboard to help you understand engagement.
  • Log data such as IP addresses, browser type, operating system, referring URL, pages visited, and the dates and times of visits.
  • Device information such as device type and screen resolution, which may be used to optimize the install experience across platforms (e.g., iOS "Add to Home Screen" guidance vs. desktop PWA install prompts).
  • Cookies and similar technologies used to maintain your login session and remember your preferences.

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including generating and hosting PWA install links.
  • Authenticate your identity and manage your account.
  • Track and display visit and install analytics for PWAs you create.
  • Deliver platform-appropriate install instructions to end users.
  • Monitor and improve the performance, security, and reliability of the Service.
  • Respond to your requests, feedback, and support inquiries.
  • Comply with legal obligations.

We do not use your User Content — including AI builder prompts, chat messages, or custom system prompts — to train or improve AI models. We use paid API tiers for our third-party AI providers (Google Gemini, OpenAI, and Perplexity AI), which are configured so that your data is not used for model training by those providers. However, third-party providers may update their terms, data handling practices, or API policies at any time. We encourage you to review their respective privacy policies, linked in the Third-Party Services section above, for the most current information on their data retention and usage practices. We will update this policy if we become aware of material changes to how our providers handle your data.

Cookies and Session Data

The Service uses cookies primarily for authentication and session management. These are essential cookies required for the Service to function — for example, to keep you signed in while you manage your apps.

You can configure your browser to refuse cookies or to alert you when cookies are being sent. If you disable cookies, you may not be able to sign in or use authenticated features of the Service.

Third-Party Services

We use the following third-party services in connection with operating the Service:

  • Supabase — for database, authentication, and file storage services. Supabase stores account information, app data, and uploaded images (such as app icons) you provide. For more information, see Supabase's Privacy Policy.
  • Vercel — for hosting and deployment. Vercel may collect performance and usage data in accordance with Vercel's Privacy Policy.
  • PostHog — for product analytics. PostHog collects usage data such as page views, feature interactions, and device information to help us understand how the Service is used and improve the user experience. This includes analytics on generated install pages, meaning end users who visit your PWA's install link may have their visit recorded. For more information, see PostHog's Privacy Policy.
  • Google (Gemini) — for AI code generation, AI chatbot functionality, and AI image generation. Chat messages, prompts, and generated content are processed by Google's Gemini API. For more information, see Google's Privacy Policy.
  • OpenAI — for the real-time voice assistant module. Voice interactions are processed by OpenAI's Realtime API. For more information, see OpenAI's Privacy Policy.
  • Perplexity AI — for the web search module. Search queries are processed by Perplexity's API. For more information, see Perplexity's Privacy Policy.
  • Upstash — for rate limiting and scheduled task infrastructure. For more information, see Upstash's Privacy Policy.

If we integrate additional third-party services in the future, we will update this policy accordingly. We encourage you to review the privacy policies of any third-party services we use.

Information Visible to End Users

When you create a PWA install link through Envelope, the generated install page will publicly display the app name, icon, and theme color you configured. The URL of the underlying web app may also be visible. Visit and install counts are visible only to you in your authenticated dashboard and are not shared publicly.

Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following limited circumstances:

  • With your consent or at your direction.
  • With service providers who help us operate the Service, subject to confidentiality obligations.
  • For legal reasons, including to comply with applicable law, regulation, or legal process; to enforce our terms of service; or to protect the rights, property, or safety of us, our users, or the public.
  • In connection with a business transfer, such as a merger, acquisition, or sale of assets.

Data Retention

We retain your account information and app data for as long as your account is active. If you delete an app from your dashboard, we will remove the associated app data and install page.

Following account termination or closure, we will delete your account and associated personal data within 30 days, unless retention is required to comply with legal obligations, resolve disputes, or enforce our agreements. You may request a copy of your account data by contacting us within 30 days of account closure (see the Contact section below). Any data retained beyond the 30-day deletion period for legal purposes will be deleted once the retention purpose has been fulfilled.

Data Security

We implement reasonable technical and organizational measures to protect the information we collect, including the use of secure hosting infrastructure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your account and associated data.
  • Object to or restrict certain processing of your data.
  • Request portability of your data.

To exercise any of these rights, please contact us using the information in the Contact section below. Where applicable, we will provide your data in a commonly used, machine-readable format (such as JSON or CSV).

For Residents of the European Economic Area (EEA)

If you are located in the EEA, we process your personal data on the basis of contract performance (to provide the Service to you), legitimate interests (to improve and secure the Service), or your consent where applicable. You have the right to lodge a complaint with your local data protection authority.

For California Residents

Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

International Data Transfers

If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.

Where personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to the United States or other countries that have not received an adequacy decision, we rely on appropriate safeguards to protect your data. Our key service providers — including Supabase, Vercel, PostHog, and Google — maintain Standard Contractual Clauses (SCCs) or other approved transfer mechanisms as part of their data processing agreements. For more information about the specific safeguards used by each provider, please refer to their privacy policies linked in the Third-Party Services section above.

By using the Service, you acknowledge that your information may be transferred internationally as described in this section.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Nesoi Group LLC Email: support@envelope.build Website: https://envelope.build/