Privacy policy

Last updated: 27 October 2026.

Anvyll is a Windows desktop application that refines prompts for large language models.

Controllers / operators (the Netherlands):

• Jules Roelen — Chamber of Commerce (KvK) 42204479
• Nick van Dullemen E-commerce — Chamber of Commerce (KvK) 99213699, Tilburg, the Netherlands

The Windows installer is code-signed under Nick van Dullemen E-commerce. Contact: support@anvyll.ai or https://anvyll.ai/support.

What we process

• On your device: prompts, history, sessions, projects, and related product data in an encrypted local vault. Device preferences (hotkey, theme) in a separate local file.
• On our servers (Supabase): account profile (email, display name), subscription status, credit ledger, usage meters (token counts, not prompt text), and limited anti-abuse fingerprints.
• Payment (Stripe): billing identity, payment methods, invoices, and tax data. Stripe is merchant of record.
• AI provider (OpenAI): prompt and context text in transit for refinement, via our hosted proxy (Railway).
• Sign-in (Google and/or email): identity claims needed to create and secure your account.
• GitHub (optional, Connect project): if you connect GitHub, we store which GitHub App installations belong to your account (installation id, account name, repository selection) and, per connected repository, the last commit that changed AGENTS.md. When a project syncs, our servers read only that repository's root AGENTS.md (read-only) and pass it to your device; its contents are not stored on our servers. Disconnect in the app, or uninstall the Anvyll app in your GitHub settings, to revoke access.

Download links, reminders and waitlists

If you ask anvyll.ai to email you the Windows installer (for example from your phone), or join the Mac, Linux or phone-app list, we process:

• your email address, the device type we detected (for example "iPhone" or "Mac"), the page and button you used, and timestamps;
• whether the link was opened and the installer downloaded, so we can measure if this works.

We use it only to send what you asked for: the download link, at most one reminder if you haven't installed by the next day, a purchase follow-up if you start a plan on the web, and for a waitlist a single confirmation and a single launch notice. No newsletter. Every reminder and waitlist email has a one-click unsubscribe link.

Email addresses are stored hashed for matching; the readable address is deleted once you create an account with it, and unconverted requests are deleted after 180 days. Waitlist entries are kept until we've sent the launch notice (plus 30 days) or you unsubscribe. Email delivery is handled by Resend. To be removed sooner, use the unsubscribe link or email support@anvyll.ai.

Website cookies and advertising

The website anvyll.ai uses a cookie banner. Before you choose, Google tags run in consent mode with all storage set to "denied": no advertising or analytics cookies are set, and only cookieless signals (such as a page load or a download click, without identifiers) are sent to Google. Only if you click Accept do we set cookies and load:

• Google Analytics (measurement ID G-5H2X1DXY90): visits and page use on anvyll.ai;
• Google Ads (conversion tag AW-18466235346): whether a visit from a Google ad led to a download click;
• Meta Pixel (ID 1854414126007644): whether a visit from a Meta ad led to a page view or download click.

Legal basis: your consent. You can withdraw it at any time by clearing the site's cookies or local storage in your browser; the banner then asks again. The Windows app itself contains no advertising trackers.

Why we process it

To provide the service you request (contract), to meter free credits and subscriptions, to prevent abuse of free and trial offers, to meet tax/invoicing duties, to operate and diagnose our own infrastructure (server-side error reporting with pseudonymous references, not gated by the in-app telemetry checkbox), and, only if you opt in, to collect basic client reliability signals via the telemetry setting.

Retention

Usage events are kept for 13 months, then aggregated. Stripe webhook payloads are kept for 30 days. Abuse fingerprints are kept for up to 12 months after account deletion. Stripe invoices are kept for the statutory period (accountant-owned).

Your rights (EEA/UK)

Access, rectification, erasure, restriction, portability, and objection where applicable. In the app: Settings → Privacy & data for export and deletion. Deletion cancels Stripe subscriptions immediately; invoices remain with Stripe as legally required. Email support@anvyll.ai for other requests. You also have the right to lodge a complaint with a data protection authority, in the Netherlands the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Sharing

We do not sell personal data. We use these subprocessors to run the product:

• Supabase: authentication and account data
• Railway: hosted refine proxy
• OpenAI: prompt and context text in transit for refinement
• Stripe: payments and invoices
• Google: optional Google sign-in
• GitHub: optional repository connection (read-only, AGENTS.md only)
• Sentry: server-side error reporting (pseudonymous references)
• Resend: delivery of account and download-link emails
• Google (Analytics, Ads): website measurement and ad conversion measurement, only after cookie consent
• Meta Platforms: ad conversion measurement via the Meta Pixel, only after cookie consent

International transfers

We prefer EU hosting. Where a processor is outside the EEA, transfers use appropriate safeguards such as Standard Contractual Clauses.

Contact

support@anvyll.ai or https://anvyll.ai/support.

Bug reports

When you choose Report a bug, Anvyll sends the description and screenshots you review to our private support service, linked to your account. We process requested support reports under documented legitimate interests in investigating product faults. Reports are not sent to AI providers for analysis and are not used for training.

A separate, unchecked choice allows a technical diagnostic summary for that report. It contains app/system versions, capture outcomes, timings, backend status/error codes and request references. It excludes prompt text, clipboard text, vault data, window titles, paths, credentials and request/response bodies. This consent is independent of the telemetry preference. You can report an issue without diagnostics.

Descriptions and screenshots are retained for up to 90 days; diagnostics for up to 30 days. You can review/export your reports, remove diagnostics or delete a report in Help → My reports. Account deletion also removes reports and queues screenshot deletion. Access is blocked immediately on deletion; active-storage cleanup retries complete within 24 hours. Backup erasure follows the processor schedule, at most 30 days.

Unsent descriptions and screenshots stay in memory only and are discarded when you close the form, change accounts or exit Anvyll; no report draft is saved on your device. Repeated capture failures may cause a local suggestion; this sends nothing automatically. Disable suggestions in Settings → Data and Privacy. Only manually selected screenshots are attached; descriptions and screenshots may contain personal data, so review and redact them before sending. Authorized support staff can read submitted reports. Contact support@anvyll.ai to exercise applicable data rights.