1. Introduction
Pamir AI builds the personal agent computer, designed so your data stays yours - on your device, under your control. This Privacy Policy explains how we collect, use, disclose, and protect personal information across our products and services: our website (www.pamir.ai), our hardware devices (each a “Device”), our mobile application (the “Companion App”), and the cloud services we operate in connection with them. Our products are currently intended for individuals and organizations located in the United States.
2. Our Design Principle: Your Content Stays on Your Device
The Device is designed to process and store your content locally. Your files, your agents’ working data, and the content you create or store on your Device remain on hardware you own - they are not stored on our servers. File transfers between your Companion App and your Device travel over an encrypted peer-to-peer connection and do not pass through our cloud. Queries you send to AI features are transmitted through our infrastructure to generate responses but are not stored by us (see Section 4). The information we do collect, described below, is the account and operational data needed to provide our services - not your content.
3. Information We Collect
We collect the following categories of information:
| Category | Specific Data | Purpose |
|---|---|---|
| Account Information | Email address, name, display name, and optional profile image, collected at account creation via secure third-party sign-in | To create and authenticate your account and communicate with you about the services |
| Device & Pairing Data | Device hardware identifiers, device name, pairing and binding records, and secure-networking configuration (private network addresses and node records) | To link your Device to your account, enable remote access, and secure device-to-app communication |
| Product Telemetry | Usage metrics and diagnostic events (feature usage counts, error events, performance measurements) tied to account and device identifiers, retained up to 12 months (see Section 7). Telemetry does not include your content, and our systems are designed to reject content in telemetry fields | To understand product usage, diagnose problems, and improve the products |
| Push Notification Tokens | Device tokens for the notification service on your phone (e.g., Apple Push Notification service) | To deliver notifications you enable |
| Activity Data | Daily activity counters (e.g., days on which your account was active) | To understand engagement and maintain service quality |
| Purchase Information | Order details, shipping address, and payment information processed by Shopify Inc., which operates our online store; we do not receive or store payment card numbers | To fulfill orders, process payments and refunds, and provide warranty service |
| Support Communications | Messages you send us and related diagnostic information you choose to share | To respond to inquiries and provide support and warranty service |
| Website | Email address, if you submit one through our website; aggregated website-usage information via Vercel Analytics, including page views, URLs visited, referring websites, and approximate geographic location (see vercel.com/docs/analytics) | To send product updates you request, analyze website usage, and improve our website |
4. AI Features
Certain features send your queries and related content, including images you attach to chats, through our infrastructure to third-party AI model providers solely to generate responses. When you use our managed AI service, your queries are not stored by Pamir AI, and our model provider processes them under zero-data-retention terms, i.e. your prompts and responses are not retained or used for training. If you connect your own AI provider, your queries go directly from your Device to that provider, and that provider’s terms govern its data handling. The providers we currently use are listed in the Service Providers section below. If we ever engage a provider that does not offer zero-data-retention terms, we will update this policy and the provider list before your data is processed by that provider.
Google Connector
If you enable the Google connector on our app, PamirAI accesses the following through Google's APIs, limited to the permissions you grant on Google's consent screen:
- Gmail: message content, so you can search, summarize, extract action items from, and ask questions about your mail. PamirAI can also send a new email from your Gmail account when you directly instruct it to send that message. PamirAI does not send email autonomously and does not delete, archive, relabel, mark read, or otherwise modify existing messages.
- Google Calendar: event titles, times, attendees, locations, and descriptions, used for calendar briefings and meeting-preparation summaries, and busy/free availability used to identify open times.
- Google Contacts: saved contact records, used to resolve people named in your requests to their email addresses.
- Google Drive: only files PamirAI creates at your request, or that you explicitly select for use with the app.
Access and storage. PamirAI accesses this data only to generate the response or perform the email-send action you request. When you use our managed AI service, it is transmitted through our infrastructure to fulfill that request and is not collected, stored, or retained on our servers. When you sign in with your own AI provider account, it is sent directly from your device to that provider and does not pass through our infrastructure at all.
Sharing. When you use our managed AI service, this data is processed by the AI model providers identified in the Service Providers section below, under our agreements with those providers.
If you sign in with your own AI provider account, you are using that provider's service directly, under your own agreement with them. PamirAI does not operate that service and is not a party to your agreement with that provider. That provider's terms, including whether conversations may be used to train its models, govern its handling of your data, and PamirAI cannot observe or change your settings with that provider.
Training. PamirAI does not use Google user data, whether raw or derived, to create, train, or improve any machine learning or artificial intelligence model, including our own.
Limited Use. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
Disabling. You can disable the Google connector at any time in the Companion App, or revoke PamirAI's access at myaccount.google.com/permissions.
5. How We Use Your Information
We use personal information for the following business purposes: to provide, secure, and maintain our products and services; to create and manage accounts and device pairings; to fulfill orders and provide warranty and support service; to send service communications and, where permitted by law, product updates; to analyze usage and improve our products; to detect and prevent fraud, abuse, and security incidents; to comply with legal obligations; and to protect our legal rights.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your personal information for automated decision-making that produces legal or similarly significant effects.
6. How We Share Your Information
We do not sell or rent your personal information or disclose it to third parties for their independent marketing purposes. We share personal information only in the following circumstances:
Service Providers. We engage third-party service providers to perform services on our behalf, including: Amazon Web Services, Inc. (cloud infrastructure, storage, and account authentication); Fireworks AI, Inc. (AI model inference for our managed AI service); Shopify Inc. (online store, order management, and payment processing); DCL Logistics, Inc. (order fulfillment, shipping, and returns processing); Tailscale Inc. (secure device networking, including the connection metadata inherent to operating your private network); Apple Inc. (push notification delivery and app distribution); and Vercel Inc. (website hosting and analytics). Service providers may process personal information only as necessary to provide services to us and are subject to applicable contractual and legal obligations concerning data protection and security. A current list is maintained at our Trust Center.
Legal Requirements. We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers. In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. Where required by applicable law, we will provide notice concerning material changes in the ownership or control of your personal information.
7. Data Retention
We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy: account and device data for the life of your account (deleted following account deletion through our established deletion process); product telemetry linked to your account or device for up to twelve (12) months, after which identifiers are removed and the de-identified data may be retained without time limitation for analytics, we do not attempt to re-identify de-identified data; purchase records as required for warranty, tax, and accounting purposes; email addresses submitted through our website, until you unsubscribe or request deletion; and support communications for as long as needed to resolve and document the matter. When you delete your account, your data is removed from our active systems promptly and from encrypted backups within fourteen (14) days.
Retention may be extended where required or permitted by applicable law. Content on your Device is yours and is never retained by us - it is not on our systems to begin with.
8. Data Security
We implement reasonable administrative and technical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or loss, including: encryption in transit (HTTPS/TLS) for all communication with our services; encrypted storage for data at rest in our cloud infrastructure; access controls that limit personal-information access to personnel who need it, with personnel screening and security training programs; and data minimization, we collect only what the services need, and our product architecture keeps your content off our servers entirely. We maintain a security program aligned with industry-recognized security frameworks. While we use reasonable safeguards, no security measure can guarantee absolute security.
9. Your Privacy Rights
We give you control over your personal information regardless of where you live: you may request to know what personal information we have collected about you, to access it, to correct it, to delete it, or to receive it in a portable format. We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising these rights. Our website does not currently respond to “Do Not Track” browser signals, as no common standard has been adopted; we do honor Global Privacy Control signals where applicable law requires.
To exercise your rights: you may delete your account (and its associated data) directly in the Companion App, or contact us at security@pamir.ai. We will verify your request using your account email and respond within forty-five (45) days.
10. Children’s Privacy
Our products and services are intended for adults and are not directed to children. You must be at least 18 years old to purchase a Device or create an account, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by posting the updated policy on our website with a revised “Last Updated” date and, for material changes affecting account holders, by notice in the Companion App or by email. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your personal information, please contact us:
PamirAI Incorporated,558 Brewster Ave
Suite 100
Redwood City, CA, 94063