PRAE / Privacy notice
Privacy, with boundaries.
The local runner and hosted workspace process different information. Connecting an agent is also a disclosure decision: tool output may enter that provider's context.
Who operates the service
Null Ventures LLC operates PRAE through Null Security. Use the product contact route for privacy questions or an access, correction, export or deletion request. Identify your account email and request; do not send passwords, card details, recovery codes or project secrets.
What stays in your environment
The local runner reads the files and metadata approved in its scope. Source content, evidence, findings, fingerprints and local backups are retained in the customer's workspace. The engine does not intentionally upload raw source files by default. The local graphical viewer uses a temporary private address on the same computer.
Local storage is not made encrypted merely by using the Platform. Use an encrypted operating-system volume, protect the workspace and fingerprint key, and control backups. An export, explicit report share or hosted-map action changes where that selected material is available.
What the hosted workspace processes
| Information | Purpose | Boundary |
|---|---|---|
| Identity and sessions | Sign-in, verification, recovery and account protection | Neon Auth processes account email, name, authentication and session data. The application revalidates protected sessions. |
| Project and membership records | Assign licensed use and enforce access | Project IDs and names, optional website and repository references, named members, roles, invitations, assignments and entitlement references. |
| Credentials and application grants | Authorize a person and project | Manual credential hashes, purpose, expiry, last use and revocation. Raw manual credentials are shown only on creation. OAuth clients receive their own tokens. |
| Billing information | Confirm access and resolve payment state | Stripe processes payment details. The Platform stores provider references and entitlement facts; it does not receive full card numbers. |
| Opt-in shared artifacts | Provide private diagrams, reports, comparisons and agent review | Approved topology, route and relative-file references, component metadata, assessment results, correction plans, verification receipts, diagnostics, source fingerprints and available revision identifiers. Such metadata may be sensitive. |
| Operational records | Rate limiting, security, recovery and troubleshooting | Keyed request counters, request IDs, fixed error codes, access changes, worker status and encrypted backups. |
What your agent provider receives
Local and hosted MCP responses are designed to minimize output, but that output may be processed by the coding assistant, model or agent platform you selected. The hosted interface returns approved shared metadata; the local interface returns scoped results and artifact handles. Review the provider's privacy, retention and training settings.
Credentials belong in the client's secret configuration, not in a prompt. Do not put personal records, production secrets or sensitive payloads into a map or free-text annotation. Pattern-based checks are not proof that arbitrary text contains no confidential information.
Providers and purposes
Netlify hosts the website, application functions and private artifact storage. Neon provides the account database and managed authentication. Stripe provides payment processing and subscription services. Resend delivers branded account verification, sign-in and recovery mail through a dedicated sending-only credential. These providers process information needed to deliver their services.
The Platform pages do not add advertising tags, session replay or third-party analytics. Essential session cookies and limited browser storage support sign-in and workspace selection. The website host still processes ordinary request and network information to serve the application.
Information is used for the requested service, access control, payment administration, support, security and applicable legal obligations. The Platform does not provide customer source content to a model for training as part of its own assessment service. The customer's separate agent-host arrangement may differ.
Retention, revocation and deletion
Manual project credentials expire within seven days. Invitations expire after seven days. Shared-map links expire after 24 hours; expiry is an access restriction and must not be confused with immediate physical deletion of all stored copies. The Evidence library retains separate shared versions for 24 hours after their capture time; sharing a version again does not extend that deadline. Its scheduled cleanup removes expired content and index entries, retaining minimal ownership/expiry markers. Previously encrypted backups and security records have their own retention boundaries. Downloaded copies remain under the recipient’s control.
Project owners can schedule deletion in Projects with a 30-day recovery window. Hosted project access stops immediately; the owner can restore the project to its archive before the deadline. After the deadline, scheduled cleanup removes current project details, credentials and shared content from the serving records, while preserving a minimal project identity and licensed-slot record. The recovery window does not extend the existing expiry of shared reports. Security audit history, legally required billing records and previously encrypted backups are separate from this cleanup. Deleting a project does not delete your account, cancel your subscription or erase your application or local copies.
Removing a member revokes their hosted access and manual credentials. Existing signed offline receipts remain valid only until their stated expiry. Null Ventures cannot erase local customer copies, agent-provider copies or external backups by revoking an account.
Final hosted retention periods, automated expiry cleanup, backup deletion and privacy-request response procedures must be approved and verified before paid launch. During the preview, contact Null Security to request review of retained account or shared-artifact information. Legally required transaction records and limited security evidence may need separate retention.
Your controls and requests
You choose the local assessment scope, whether to share an artifact, which project an agent can access, and whether to revoke a connection. Team owners and administrators control membership and assignments. Use your workspace to manage those permissions and your billing portal to manage renewal.
Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, receive a copy, or complain to a competent authority. Identity checks may be needed before acting on a request. A subscription's cancellation is not an account-deletion request.
Before accepting customers who require specific residency, cross-border transfer safeguards, a data-processing agreement, enterprise identity guarantees or a regulated-data agreement, the corresponding terms and technical controls must be established. The current preview does not claim that those obligations are universally satisfied.
Changes and contact
Material changes will be reflected in a dated notice and communicated where required. This page describes PRAE; the general Null Security privacy notice covers other website products and workflows.