Privacy Policy

1. Definitions

• Namirasoft: Namira Software Corporation.
• Service: Namirasoft Inference.
• Namirasoft Services: the broader family of Namirasoft products that operate with your Namirasoft Account.
• Account: your Namirasoft Account, which authenticates you and governs identity across Namirasoft Services.
• Inferencer: an execution flow you configure to carry out a request. An inferencer can run a model directly or combine others, by spreading requests across several, falling back from one to the next, racing them, routing by condition, or wrapping a flow with context and safeguards.
• Provider: the company whose model produces a response.
• Interaction: a single request and the response to it, together with its status, the model and provider that answered, token counts, cost, and timing.
• Chat: a series of Interactions grouped together.
• Memory: stored conversation context that you attach to the inferencers you choose. Once attached, the context is kept across chats and is supplied to every request that runs through an inferencer attached to that memory, so what is stored in it is available wherever it is in use.
• Knowledge base: information you add as text, links, or files so it can be supplied to a request as context.
• Guardrail: screening rules you define that are applied to the content going into a request, the content coming back, or both.
• Classifier: a component that assigns a request to the classes you define so different requests can be handled differently.
• Validator: a component that checks a response against the format you define and can ask for a corrected response.
• Wiper: a cleanup rule you attach so stored data is removed on a schedule or once it passes a count you set.
• Budget: a spending limit you set for an execution.
• Workspace: a grouping of products and data, created and managed in Namirasoft Workspace, used to organize your work in the Service.
• Personal Information: information that identifies, relates to, or can reasonably be linked to an identifiable individual, including you.
• Processing: any operation performed on information, such as storing, routing, screening, calculating, or organizing it.

2. Namirasoft Account

Access to Namirasoft Inference requires a Namirasoft Account. You register and sign in through Namirasoft Account, which authenticates your identity. Your identity, login, device and network details, and any other personal information associated with your Namirasoft Account are collected and handled by Namirasoft Account under the Namirasoft Account Privacy Policy, not by this Service. For this Service, this Privacy Policy controls; for identity and authentication, the Namirasoft Account Privacy Policy controls.

3. Information We Collect

To provide the Service, Namirasoft Inference processes:

• Account identifiers received from Namirasoft Account, used to associate your work with you and show you your own records.
• The execution flows you configure, including your inferencers and how they are composed, the models and providers they reach, a reference to the credential each one uses, and the rules, conditions, classifiers, validators, guardrails, budgets, and cleanup rules you attach, together with the Workspace and any categories, tags, or field values you add.
• Interactions, including the content of the request you send and the content of the response you receive, any error, the status, the model and provider that answered, the token counts, the cost, and the time it took. Chats group your Interactions together.
• Memory that you enable, which holds conversation context so it can be supplied to later requests.
• Knowledge bases you create, including the text you enter, the links you add, and the files you upload, so their content can be supplied to a request as context.
• Usage and cost information calculated from your Interactions, such as token counts, cost, and totals over time, so you can see your usage and so the limits you set can be applied.
• Execution records written to the log group you choose in Namirasoft Log, where you attach one, so you can trace and debug what happened.

Your requests and responses are stored. Namirasoft Inference is not a pass-through service. The content of each request and the response to it is kept as an Interaction, because that is what lets you review your history, lets memory carry context forward, and lets usage be measured. You decide what to put in a request, so include only what you need, and keep in mind that the content is sent to the providers your flow reaches, as described in section 9.

One request can reach more than one provider. What your content reaches follows the flow you built. A flow that races several models sends the same content to all of them at once. A flow that falls back sends it to each model in turn until one answers. A flow that routes by condition sends it down the path that matches. A classifier sends the content to the inferencer that performs the classification, and a validator that asks for a correction sends the response to the inferencer that performs it. Each of these can reach a different provider, so a single request can result in your content being sent to several of them.

Memory and knowledge bases are sent with later requests. Memory is kept independently of any one model, so stored context is supplied to whichever model answers next, which may be a different provider than the one that produced it. Knowledge base content is supplied to a request in the same way. So information you store in the Service can be sent to a provider again each time a request uses it.

4. Information We Do Not Collect

Namirasoft Inference does not:

• collect your Namirasoft Account password or sign-in credentials, which are handled by Namirasoft Account;
• hold the provider keys your flows use. A key is kept encrypted in Namirasoft Secret and supplied through Namirasoft Credential when a request runs, and the Service refers to it rather than holding it;
• use the content of your requests, responses, memory, or knowledge bases for anything other than carrying out the executions you configure and providing the functions described in this Policy. We do not sell this content or your usage information, we do not use it for advertising, and we do not use it to build a profile of you.

5. Consent and Legal Grounds

Namirasoft generally collects, uses, and discloses your Personal Information with your knowledge and consent, which may be express or implied depending on the sensitivity of the information and the circumstances. When you first use Namirasoft Inference, you agree to this Privacy Policy and the Terms of Service, which is how you give your consent to the handling of your Personal Information described here, and you can withdraw it as described in section 6. In some cases, applicable law allows or requires us to handle Personal Information without consent, for example to provide a service you have requested, for security, fraud prevention, technical operation, or legal compliance, or where otherwise permitted or required by law. Where our activities are also subject to laws that use a legal basis framework, such as for users outside Canada, we rely on the appropriate basis for the activity, including performance of a contract, our legitimate interests, consent, and compliance with legal obligations.

6. Consent and Withdrawal

Where we rely on your consent to process Personal Information, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and it may limit your ability to use parts of the Service that depend on that information. You can manage your identity and related consents through Namirasoft Account.

7. How We Use Information

We use the information above to: carry out the execution flows you configure and return the responses; keep your Interactions so you can review your history and see which model and provider answered; hold memory and knowledge base content so it can be supplied to the requests you direct; apply the rules, classifiers, validators, and guardrails you configure; calculate your usage and cost and apply the budgets and limits you set; remove stored data according to the cleanup rules you attach; maintain the security and integrity of the Service; and diagnose problems and improve its reliability. We do not sell your requests, responses, or usage information, and we do not use them for advertising.

8. Automated Decision-Making

Namirasoft Inference carries out the flows you configure. It selects the path a request takes according to your routing, applies the guardrails you define to screen content going in and coming back, which can stop a request or a response from continuing, assigns requests to the classes you defined through a classifier, checks responses against the format you set through a validator and can ask for a corrected response, and applies the budgets and limits you set, which can stop further requests once a limit is reached. Some of these steps are carried out by an AI model rather than by a fixed rule. Where you write a screening rule in plain language, or set up a classifier, the content being checked is sent to the inferencer you chose for that purpose, and that model makes the judgement your rule describes. These steps follow the configuration you created, and you can change or remove any of them. The content of a response is produced by the provider’s model. The Service does not use your information to make decisions that produce legal or similarly significant effects about you, and it does not profile you.

9. Sharing and Disclosure

Namirasoft does not sell Personal Information. We share information only as follows:

• With the model providers your flow reaches, which receive the content of your request, and any memory or knowledge base content supplied with it, so a model can produce a response. Where you connect a provider with your own key, the request runs on your own account with that provider, under the terms and privacy policy you have with it, and that provider handles and may retain what you send under its own policy. Where a flow reaches a model through a service that selects a provider on your behalf, your request is passed on to the provider it selects, and that provider handles what you send under its own policy in the same way;
• Within Namirasoft Services where needed to operate the Service, including supplying the key you keep in Namirasoft Credential and Namirasoft Secret so a request can authenticate to a provider, writing execution records to the log group you choose in Namirasoft Log, and applying your Workspace and the access others have through Namirasoft Access;
• Service providers that host or secure our infrastructure, bound by confidentiality and permitted to use the information only to provide their services to us;
• Legal and safety where required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers such as a merger, acquisition, or sale of assets, subject to this Policy;
• At your direction or with your consent when you ask us to share information or otherwise agree;
• Aggregated or de-identified information that cannot reasonably identify you.

The providers your flow reaches are separate companies. What each one does with the content it receives, including whether and for how long it retains it, is governed by its own terms and privacy policy, and you choose which providers your flows reach.

10. International Transfers

Namirasoft is based in Canada, and your information may be processed in Canada and in other countries where we or our service providers operate. The Providers you choose may process your prompts in their own locations under their own policies. We handle information in accordance with applicable Canadian privacy laws, including PIPEDA and applicable provincial privacy legislation, and we take steps intended to ensure your information remains protected when it is processed in another country. Where required by applicable law, we use appropriate safeguards for such transfers. Because privacy laws differ between countries, information processed in another country may be subject to that country’s laws.

11. Security Commitment

Namirasoft maintains administrative, technical, and organizational measures to protect Personal Information within the Service against unauthorized access, disclosure, alteration, misuse, loss, or destruction. These measures may include access controls, authentication protections, encryption in transit, monitoring, logging, and operational safeguards appropriate to the nature of the information processed, and we continually review and strengthen them. Access to information within the Service is limited to what is needed to operate, support, and secure it, under confidentiality obligations and internal controls. Because your content is sent to the providers your flow reaches, it is also subject to each of those providers’ security while they handle it. You also help keep your information safe by keeping your Namirasoft Account credentials and tokens confidential, choosing carefully what you include in a request, and protecting activity performed under your account.

We maintain procedures to identify, assess, and respond to security incidents involving Personal Information. Where a security incident affecting Personal Information creates a real risk of significant harm, or where notification is otherwise required by applicable law, we will notify affected individuals and the relevant regulators, and keep records of the incident, in accordance with applicable law.

12. Data Retention

We retain your information only for as long as it is necessary for the purposes described in this Policy, including to provide and support the Service and to meet our legal, security, and operational requirements.

Retention here is yours to set. Namirasoft Inference does not expire your data on its own. Your inferencers, Interactions, including the content of requests and responses, memory, and knowledge bases are kept for as long as your Namirasoft Account exists, or as needed to provide the Service, so that your history and context stay available to you. To have data removed automatically, you attach a cleanup rule, which removes stored data on a schedule or once it passes a count you set, and you can clear memory yourself by date, by count, or in full. The retention and deletion of your account data overall are governed by Namirasoft Account under the Namirasoft Account Privacy Policy.

What a provider retains of content you sent it is governed by that provider’s own policy, and records written to a log group are kept under the retention you set in Namirasoft Log. When you delete something, it becomes inaccessible in the Service straight away. For a period afterwards it can still be restored, and after that it is permanently erased and can no longer be recovered. It makes no difference whether you remove something yourself or a cleanup rule removes it, as both work the same way, and the same applies when your records are removed because your Namirasoft Account is deleted. Because of system dependencies and backups, copies may remain in secure backups until they are replaced in the ordinary course.

13. Data Integrity and Responsibility

You decide which models and providers your flows reach, what to put in a request, what to store in memory and knowledge bases, and which safeguards and limits to apply, and you are responsible for those choices and for having the right to send what you include. Namirasoft Inference carries out the flow you configured and records the Interaction.

Content that has already been sent to a provider cannot be recalled. Removing something here does not remove what a provider already received, which is governed by that provider’s own policy and, where you connected it with your own key, by the relationship you have with it.

The content of a response is produced by the provider’s model and may be inaccurate or incomplete. You are responsible for reviewing a response before you rely on it, and a response is not professional advice.

14. Your Privacy Rights

Under applicable law you may have rights over your Personal Information, such as to access it, correct it, request its deletion, object to or restrict certain processing, withdraw consent, or receive a copy in a portable form. You can view your inferencers, Chats, and Interactions in the Service at any time, change or remove the flows and the memory and knowledge bases you created, and attach a cleanup rule so stored data is removed automatically. For other requests, including a request concerning the content of your Interactions, contact us and we will handle them in accordance with applicable law, which may include retaining a record where we have a legitimate or legal basis to do so. Because content you sent to a provider is also held by that provider, a request concerning what the provider holds is carried out by that provider under its own policy. For identity and account rights, use Namirasoft Account.

To make a request, contact us using the options in the Contact Us section at the bottom of this page. To protect your information, we may need to verify your identity before we respond, within the timeframes and subject to the exceptions set out in applicable law.

15. Children’s Privacy

The Service is not directed to individuals under 18. Eligibility and accounts are managed by Namirasoft Account; if Namirasoft Account determines that an account belongs to a person under 18, the account and its information are handled under the Namirasoft Account Privacy Policy.

16. Communications

Namirasoft Inference does not send commercial communications; it carries out the execution flows you configure. When we need to contact you about your account or the services you use, for example a security, technical, or account-related notice, we send the message to the verified email address on your Namirasoft Account, the address you signed up with and verified there. These messages are part of providing the Service.

17. Cookies and Tracking

The Service uses cookies that are strictly necessary to sign you in and operate it, such as the cookies used to maintain your authenticated session, together with Google Analytics cookies that help us understand how it is used. Google Analytics is operated by Google under its own privacy terms. You can manage cookies through your browser settings.

18. Accountability and Privacy Contact

Namirasoft is responsible for the Personal Information under its control and takes steps to ensure that such information is handled in accordance with this Privacy Policy and applicable privacy laws. Namirasoft has designated a person accountable for its compliance with this Privacy Policy, and their identity is available on request.

Questions, requests, or concerns regarding Namirasoft’s privacy practices or the handling of Personal Information may be submitted using the contact options in the Contact Us section at the bottom of this page.

19. How to Make a Complaint

If you have a concern about how we handle your Personal Information, you may submit a complaint using the contact options in the Contact Us section at the bottom of this page. We will review and respond to your complaint in accordance with our privacy procedures and applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province, as applicable.

20. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy from time to time to reflect changes in the Service, our practices, or legal requirements. When we make changes, we revise the effective date and post the updated Policy here. For minor or clarifying updates, your continued use of the Service after the updated Policy is posted indicates your acceptance of it. Where a change materially affects how we collect, use, or disclose your Personal Information, we will show you what has changed and ask you to review and agree to the updated Privacy Policy and Terms of Service before you continue using the Service. If you do not agree with an updated Policy, you may stop using the Service and request deletion of your Account.

Contact Us

For questions, comments, requests, or concerns regarding this Privacy Policy or information practices relating to Namirasoft Inference, please contact Namirasoft using one of the methods below. Where possible, we recommend submitting requests through Namirasoft Support for faster processing and response tracking.

Support: support.namirasoft.com

Email: accounts@namirasoft.com

Namirasoft reviews and responds to requests in accordance with applicable laws, internal procedures, and technical, security, legal, and business requirements associated with operation of the Service.