Privacy Policy

Neoma is operated by Slemix Technologies, which decides how the data described here is processed. Questions and requests go to privacy@slemix.com.

Account data. Your email address, and a name and avatar if you provide them or if they come from the account you signed in with. Passwords are stored only as a hash, never in a readable form. Signing in with Google gives us your email, name, avatar and a Google account identifier — not your Google password. Using the Telegram bot links your Telegram user ID to your account.

What you create. Prompts, uploaded images and documents, schemas, toolkits, agents, chat messages, and the results models return for you.

Billing records. Your credit balance and a ledger of every grant, purchase, spend and refund. Card details never reach us: payments go through Telegram Stars, and we receive only a confirmation identifier and an amount.

Community activity. If you publish to the community section, your handle, profile and published items are visible to others, along with likes, comments and forks.

Technical data. Server logs holding IP address, browser user agent and timestamps, kept for security and debugging.

• To run the service: authenticate you, execute generations, store your files, and keep your credit balance correct.
• To keep it safe: detect abuse, fraud and attempts to break access controls.
• To support you: answer messages and investigate faults you report.
• To meet legal obligations, including keeping records of payments.

We do not sell your data. We do not use your private content to train our own models, and we do not hand it to anyone for advertising.

AI providers. This is the important one. When you run a generation, your prompt and any attached files are transmitted to the third-party provider that operates the model you selected, because that is the only way to produce a result. Each provider handles and retains that data under its own policy, which we do not control. If a prompt would be sensitive in someone else’s hands, treat it as such before sending it.

Sign-in and messaging platforms. Google if you sign in with it; Telegram if you use the bot or pay with Stars.

Infrastructure. The hosting provider that runs our servers and database.

Authorities. Only where we are legally required to disclose something.

Account and content data is kept while your account exists. Delete your account and we remove your profile, files, chats and generated results. Two things outlive it: payment records, which we keep because accounting rules require it, and content you published to the community under a licence others have already relied on by forking it.

Server logs are rotated on a short cycle.

Deleting your data with us does not reach copies a third-party AI provider may hold — those are governed by that provider’s retention policy.

You can ask us to show you the data we hold about you, correct it, delete it, or provide a copy in a portable form. Most of it you can reach directly in your profile and files. For anything else, write to privacy@slemix.com and we will respond within 30 days.

Depending on where you live, you may also have the right to object to certain processing or to complain to a data protection authority.

Traffic is encrypted in transit. Passwords are hashed. Provider API keys are stored encrypted and are never exposed through the interface, which shows only a masked fragment. Access to production data is limited to the people who operate the service.

No system is perfectly secure. If a breach affects your data, we will tell you.

Neoma is not intended for children. We do not knowingly collect data from anyone below the age of digital consent where they live. If you believe a child has an account, write to us and we will remove it.

If this policy changes materially, we will announce it in the app before the new version takes effect, and the effective date above will change. See also our Terms of Service.