Security
Your server, your keys, access you approve.
Facts about where Queva runs, what we can see, how access works and how to switch it off.
Yours
- Queva runs on one private server in your account. For new setups we use DigitalOcean.
- Logins and keys go on your private Settings page and are stored on your server. Never text them to Queva or to us.
- Queva never reads your mailbox and never sends from your address. It only uses its own email inbox, and it treats forwarded emails and links as untrusted.
What we can see, per plan
| Plan | Our access |
|---|---|
| Care | No login to your server. A health feed with no message content: is it running, updated and passing checks. |
| Managed | A fixed settings menu that cannot read chats, memory, files or tool data. Every command shows in your access log. |
| Full Service | With a signed waiver: chats, memory, files and settings, only after you reply YES, and only for a limited time. |
Every plan starts with a 48-hour setup window: a separate setup login that is recorded and closes on its own.
Access requests and the log
- On Full Service, before we get in, your assistant texts you why and for how long. Nothing happens until you reply YES. STOP ends it at any time.
- Access expires on its own.
- Every login and command by us is recorded in an access log on your server that you can read.
The Logins add-on
By default Queva does not sign in to your accounts. A Logins add-on can be turned on for sites you pick, after you sign off on it. Bank, payment, payroll and email sites are blocked, and it cannot run together with scheduled jobs.
Switch it off yourself
If your assistant is doing something it should not, turn off its server in the DigitalOcean app on your phone: Droplets, your agent, Power off. Then email us.
What we refuse
We do not build or run work that moves money or handles payments, payroll, taxes or accounting records. We do not take patient records, legal case files, Social Security numbers, card details or bank logins. We refuse spam, fake reviews and pretending the assistant is a person.
Leaving
Cancel by email, export your files anytime, and we remove our access the same day. The server stays in your account. Plans · FAQ