NGARi Privacy Policy

Effective: May 2026

1. Our Commitment

NGARi is a private AI platform. Your conversations are never sent to OpenAI, Google, or any third-party AI provider. This policy explains what limited information we process and why.

2. Data Collection

Conversation data: All AI conversations are stored in our PostgreSQL database on our private infrastructure. NGARi does not transmit your conversation content to any third-party AI service.

Account data: When you create an account, we store your email address and subscription tier. We use NextAuth.js with magic link authentication — we do not store passwords.

Billing data: Payment processing is handled by Stripe. We store your Stripe customer ID and subscription status. We do not store credit card numbers, bank details, or full billing information.

Usage data: We track model usage (tokens in/out, latency) for billing and performance monitoring. This data is stored in our local database and is not transmitted externally.

3. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. The only third parties that receive limited data are:

• Stripe — for subscription billing (email, payment details — handled by Stripe, not stored by us)
• Google Workspace — for magic link authentication email delivery (your email address and the magic link token)
• Cloudflare — for DDoS protection and TLS termination (Cloudflare processes HTTP requests but cannot read conversation content, which is encrypted in transit and generated server-side)

4. Tracking and Analytics

NGARi does not use third-party analytics services, tracking pixels, or advertising platforms. We do not track you across websites. We do not use cookies beyond what is strictly necessary for authentication (session cookies).

5. AI Model Data

All AI models run on our private servers through Ollama. No conversation data is sent to external AI services. Model weights are downloaded from public model repositories (e.g., Hugging Face) and cached locally.

6. Data Retention

Your conversation data remains in our database until you delete it. Account data is retained while your account is active. You can request account deletion at any time by contacting [email protected] or through the API. Upon deletion, all personally identifiable information is permanently removed.

7. Security

All network communications use HTTPS (TLS 1.3) through Cloudflare. Authentication tokens are JWT-based with server-side secret signing. Database credentials and encryption keys are secured on our infrastructure and never shared with third parties.

8. Your Rights

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your conversation data
• Opt out of any future communications

9. Changes to This Policy

We may update this policy. Changes will be posted on this page with an updated effective date. Continued use of NGARi after changes constitutes acceptance.

10. Contact

For privacy-related inquiries: [email protected]