NIRO (hereinafter: "the Software" or "the Product") is an AI assistant for Windows, operated and sold by Nir Nagar (hereinafter: "the Company").
The contact point for any matter - privacy, support, cancellation or a complaint - is niroai.service@gmail.com. Full business details, including the business registration number and a postal address, are provided to any enquirer on request and appear on the invoice issued with every purchase.
This policy sets out what data is collected, where it goes and how long it is kept, in accordance with the Israeli Privacy Protection Law, 5741-1981 and Amendment 13 thereto.
It applies both to the installed software and to the NIRO website.
The following is stored only in NIRO's installation folder on your machine, and is never sent to the Company or held on its servers:
Note the distinction: "stored locally" does not mean "never leaves your computer". To produce an answer, your message, the files you attached and your voice recordings are sent to the AI provider as described in 2.2. What stays local is the saved copy of them.
NIRO does not run the AI model on your computer. To produce an answer, the following is sent over an encrypted connection (HTTPS/TLS) to an external provider:
Two different providers are currently used, for two different kinds of data. The distinction matters:
Message content, conversation context, files and images are sent to OpenRouter (OpenRouter, Inc.). Its privacy policy is at openrouter.ai/privacy and its terms at openrouter.ai/terms.
OpenRouter is a routing layer, not the operator of the model itself. Your data therefore passes through it to a further inference provider that actually runs the model, selected automatically by availability and speed at that moment. Providers that may receive the data include Cerebras, DeepInfra, Together AI, Fireworks AI, Groq and others on the OpenRouter network. Each has its own privacy policy, and the current list per model is published on the OpenRouter website.
We operate the account with the setting that does not permit conversation content to be used for model training. That setting applies to routing through OpenRouter.
Voice recordings, solely for transcription to text, are sent to Groq Cloud (Groq, Inc.). Its privacy policy is at groq.com/privacy-policy and its terms at groq.com/terms-of-use.
A recording is sent only when you have used voice mode. With voice mode off, no recording is sent to anyone.
We encourage you to read both providers' documents - they govern these transfers and may change from time to time.
The Company reserves the right to change or add providers in the future. If it does, the current provider will be named in this document and announced on the website.
Two separate things in NIRO are called a "key", and they are entirely different. The distinction matters:
a. The AI provider's API key
b. Your NIRO access key (licence)
Downloading the installer requires a first name, last name and email address. These are stored in Google's Firebase service, on servers in the United States (see 5.5), and are used only to:
The details you provide at registration are also kept as a single mailing-list record, used to send version updates and announcements of new capabilities. The record holds your name, email address, registration date and date of last activity.
You can leave the mailing list at any time by clicking the "unsubscribe" link at the bottom of any email we send you, or by writing to the address in section 12. Removal is immediate and requires no reason.
Once removed, you will receive no further updates or promotional messages. Transactional emails you asked for will still be sent - your access key, a resend of it at your request, and replies to enquiries you initiate. These are not marketing.
You may request full deletion of the record, not merely removal from the mailing list, via the address in section 12.
If you asked only to be removed, the record is kept marked as "unsubscribed" - precisely in order to honour that request and make sure you are not added back to the list by mistake later.
Every query you send to NIRO is transferred to an AI provider, as described in 2.2: text, files and images through OpenRouter and on to the inference provider it selects, and voice recordings to Groq Cloud for transcription. Without these transfers the software cannot function.
Spoken output on the computer is not active in the current version, and nothing is sent to Microsoft. Previously the text of the answer was sent to the Microsoft Edge text-to-speech service to be turned into audio. That service stopped being available for this kind of use, and spoken answers moved to the phone - see 5.3.
If spoken output on the computer is reinstated, this policy will be updated beforehand and will name the provider the text is sent to.
NIRO can be asked questions from your phone by voice, through Siri and Apple's Shortcuts app. Using this channel is your choice: until you create a pairing code in the software, we hold nothing in this channel and nothing passes through it.
When you do connect it, use of the channel involves the following:
The answer Siri reads out is produced by NIRO and shortened to a length that can be read aloud. The reading itself is done on your device in Apple's voice, and is not sent to any additional provider by us.
NIRO can also be reached over WhatsApp, at a number owned by the Company. Using this channel is your choice: until you send a message to that number, nothing is sent to Meta by NIRO.
When you do use it:
A distinction worth knowing: in NIRO's phone app the conversation is encrypted between the phone and the computer with a key derived from the licence, and our relay cannot read it. On the WhatsApp channel that is not possible, because the message reaches us through WhatsApp as text. If you would rather the conversation never passed through an additional third party, use the app or the software itself rather than WhatsApp.
You can disconnect at any time, and the phone number is then deleted from our records.
The website, registration form, key store, mailing list and installer are hosted on Google Firebase. Google acts as a data processor on the Company's behalf.
The database (Firestore), which holds registration details, keys and the mailing list, is located in the United States (nam5 multi-region). Your name and email address are therefore stored and processed on Google servers in the United States, not in Israel or the EU.
The server functions (Cloud Functions) run in the Europe region (europe-west1). Storage and the website itself are served by Google over a global network, and their location is determined by Google.
By using the service you consent to your details being transferred outside Israel for the purpose of providing it.
Information will be disclosed to an authority only upon an explicit lawful demand, and only to the extent required by law.
Uninstalling removes the entire NIRO installation folder, including chat history, settings, memory, license files and the encrypted API key.
To be precise, uninstalling does not delete:
%APPDATA%\niro-desktop. You can delete it manually after uninstalling.C:\NIRO_UserData. The software deliberately
backs up, outside the installation folder, your encrypted API key, your Telegram credentials and
active Telegram session, your chat history and documents it created - so that an update or a
reinstall does not lose anything.
This means that data survives an uninstall and is restored automatically on the next install.
At the end of the uninstall you are asked whether to delete this folder too; you can also delete it
manually at any time.We will respond to rights requests within 30 days, as required by the Privacy Protection Law.
The Company undertakes to take every reasonable measure available to it to prevent security breaches and protect your information, and to fix vulnerabilities as soon as practicable once found. That is an undertaking to apply effort and means, not a guarantee of a result: no system is 100% secure.
It matters here that NIRO is software that can control your computer - it writes files, runs code and system commands and opens programs, with the permissions of the user running it. Securing the computer itself - password, system updates, malware protection and keeping your access key private - is therefore the user's responsibility, and it carries real weight.
The Company is not liable for damage or disclosure originating in an act of the user, of a third party with access to the computer, or of a malicious actor - including a break-in, malware, theft of an access key, or hostile content embedded in an external source the software reads. Sections 8.1 and 8.2 of the Terms of Use set this out in full.
If a security incident affecting user information occurs, we will act to address it and notify those affected and the competent authority to the extent the law requires. Reports of security weaknesses are welcome at niroai.service@gmail.com.
The Company does operate a website. Here is exactly what it does in your browser:
You can block or clear local storage and cookies in your browser settings. Blocking them may prevent the registration form from working.
NIRO is built on a language model and it can be wrong. Answers may be inaccurate, incomplete, out of date or misleading, even when they sound confident.
NIRO's answers are not professional advice of any kind - legal, medical, financial, tax, insurance or engineering - and must not be relied upon in place of a qualified professional.
It is the user's responsibility to verify any material information before acting on it, particularly before decisions with financial, health or legal consequences.
The Company may update this policy from time to time. The current version is always published on this page with its update date at the top. Material changes - such as a change of AI provider or an expansion of the data collected - will be announced by email to the address you provided at registration.
📧 Email: niroai.service@gmail.com
👤 Privacy contact: Nir Nagar
⏱️ We will respond to privacy enquiries within 30 days.
If you receive no reply, or are not satisfied with it, you may lodge a complaint with the Israeli Privacy Protection Authority at the Ministry of Justice.
The Company may update this document from time to time. The binding version is the one published on this page, and the date of the most recent update appears at the top. Material changes will be announced as set out in the relevant document.