Privacy policy

The nerix.ai service is operated by Respiresoft LLC, 32 N Gould St, Sheridan, WY 82801, United States. For anything in this policy, write to info@nerix.ai. A person reads every message.

For this website and for your account we decide how personal data is used (we are the controller). For the documents, conversations and records your organisation puts into nerix, your organisation decides, and we process them on its behalf under our data processing agreement (we are the processor).

Two surfaces: this website at nerix.ai, and the product at app.nerix.ai. They handle very different data, so this policy treats them separately.

Almost nothing. This website sets no cookies of its own. Its browser storage holds two small items on your own device: your cookie choice with the time you made it (nerix-consent) and your light or dark choice (nerix-theme). Both stay in your browser's localStorage and are sent nowhere. If you use the Ask nerix assistant, your conversation with it also stays in this browser tab's sessionStorage until you close the tab (see the free public chat, below). When you are signed in to the product, the page also reads the product's signed-in hint (nerix_signed_in, the value 1 and nothing else) to show "Open the app". The cookie policy lists them.

There is no tracking pixel, no advertising and no third-party script of any kind. Our own visitor counter (Respiresoft analytics, on our server in France) records each visit: the page, the site that sent you, your browser and device type and your country. On a template page it also counts that the template was filled in, copied or downloaded, never what you typed. It never stores your IP address. Without your yes it keeps nothing in your browser and tells visits apart only by a code made from your connection that changes every day, so a visit cannot be linked to one on another day. Lawful basis: our legitimate interest in knowing how the site is used. If you say yes to "Measuring visits" in the cookie settings, it also keeps a random number in your browser so that a returning visit can be told from a new one. Lawful basis for that: your consent, which you can withdraw in the cookie settings at any time.

If you use the contact form, we receive what you type in it: your name, email address, optional company and team size, and your message. It is used to reply to you, and for nothing else.

The free chat on this website (on the home page, at /try and in the Ask nerix assistant on every page) is answered by a small AI model, Ministral 8B from Mistral AI, hosted in the EU, through our own central AI service. What you type is sent to that model to write the answer. We do not save your messages in a database or a log. An answer is held in our server's memory, and only there, for up to 10 minutes after it ends, so that it can follow you from one page of the site to the next and still be there after a refresh. Then it is dropped, and a restart of the server drops it sooner.

The Ask nerix assistant keeps its conversation (your messages, its answers and any document it drafted) in your browser tab's sessionStorage, so that it is still there on the next page of the site. That copy stays on your device, is sent to nobody, and is deleted when you close the tab or start a new conversation. With each question the assistant sends the address and title of the page you are on, so that the answer can fit it.

If you add a file, your browser reads it on your device. The file itself is never uploaded: for each question, only the few passages that best match it are sent with the question, and they are not saved either. If you switch on web search, the model may send search terms based on your question to the web search service our central AI service uses, and the answer lists the pages it used.

To keep the free chat from being abused and to cap what it costs, when you start a chat we use: your IP address, reduced to its network and hashed with a key that changes every day; the browser name your browser sends with every request; how long you took to type your first message, which the page measures itself; a short calculation your browser does first (a proof of work); and the number of tokens used. We read nothing else from your device: no hardware, screen, time zone or graphics values. The hashed records are deleted after 24 hours and the raw values are never stored. Daily totals for the whole site, without any address, are kept for 31 days.

Lawful basis: our legitimate interest in keeping a free service available and safe. No cookie is set, nothing is read from your device beyond what your browser sends with the request, and nothing is used for advertising or profiling. You can object by not using the free chat, or write to info@nerix.ai.

The AI suggestions in the template forms on this website use the same free service, under the same rules.

You are talking to an AI, and answers can be wrong. Please don't share personal or confidential information in the free chat.

Your account and organisation details; the documents, conversations, Sheets and records your workspace uploads and creates; and usage and audit records: who did what, when, and what it cost in credits. If you pay, Stripe handles your card; we keep the invoice, never the card number. When you ask us to use a privacy right, we keep a short record of the request (its date, its kind and, after an erasure, only a code made from your address) to show we answered it.

The audit log exists for your organisation's benefit and nobody can edit an entry, including us. If your account is erased, we replace your name and email in it with a code and keep each entry only as long as the law allows.

If you choose Continue with Google, Google sends us your name, email address and profile picture so we can create and open your account. We never see your Google password.

We use it only for your nerix account: to create it, sign you in and reach you about it. We keep no Google access token, we never sell or share this data or use it for advertising, and it is deleted when your account is erased. You can remove nerix's access at any time at myaccount.google.com/permissions. nerix's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

We process account and content data to provide the service (contract); usage and audit records to keep it secure, billable and accountable (legitimate interests and contract); invoices because tax law requires it (legal obligation); and consent-based processing only where you have actually consented, such as optional cookies, of which none currently exist. We send the emails the service needs (sign-in codes, invitations, invoices, security notices) and no marketing without your yes.

nerix does not make decisions about you that have legal or similarly significant effects by automated means. AI answers are suggestions a person reads.

There is one region today, the European Union: nerix.ai runs on OVHcloud servers in Gravelines, France. Every workspace's search index, conversations and logs are stored there. Files and backups are stored encrypted with Backblaze in Amsterdam, the Netherlands. United Kingdom and United States capacity is not live yet, and this page will say so on the day it is.

Every workspace starts EU only: its documents and questions go only to Mistral AI, hosted in the EU, and to the models on our own server. Your organisation can allow other providers, such as Anthropic, Google or DeepSeek, in Settings under AI providers, and can go back to EU only at any time. Speech and pictures need a provider outside the EU, so they work once one is allowed. A provider you have not allowed receives nothing from your workspace. A provider you have allowed receives only the text a task needs, as a processor, only for that task. Before text leaves our server, email addresses, phone, bank, card and ID numbers, and the names of the people, clients and suppliers your workspace knows, are replaced with codes, and put back in the answer. Each provider's country and cautions are printed in the product, on the picker. For example, DeepSeek processes data in China, under Chinese law, and is used only when an organisation switches it on.

The providers and what each one does are listed on the sub-processors page, and the AI page explains how answers are produced.

We never use your documents, conversations or Sheets to train a model. Mistral AI, Anthropic and Google do not train on what we send them under their terms for our use. For DeepSeek and the speech providers we have not confirmed this, so the product says they may, and they are off until your organisation allows them.

Your organisation keeps its content as long as it wants, or sets a period in Settings, Privacy: documents and conversations older than that are deleted, files included, unless a legal hold applies. A deleted document or conversation is removed at once; a deleted workspace is erased for good after a 30-day grace period, in which an owner can still change their mind. Backups are kept for at most 30 days, so erased data leaves them within 30 days of erasure. Workspace owners can export everything at any time, free of charge.

Access, rectification, erasure, portability, restriction and objection, under the UK GDPR and the EU GDPR, and withdrawing a consent at any time. Download your own data in Settings, Data and legal, Download my data (a page to read and a JSON file). Delete your account in Settings, Account (30 days to change your mind). We answer other requests within one month; write to info@nerix.ai.

When you erase your account, the record of what happened in a workspace stays (that a document was deleted, a member was removed), but your name, email address and network address are replaced by a code that cannot be traced back to you without a key we keep (GDPR Article 17(3)(e)). If your data is in the workspace of an organisation you work with, that organisation decides about it, and we pass your request on to it.

You can complain to us first: write to info@nerix.ai, we confirm within 30 days and tell you what we did. You can also complain to the ICO in the UK or to your local supervisory authority in the EU at any time.

nerix.ai is meant for people aged 18 and over. We do not knowingly collect personal data from children; if you think a child has given us data, write to us and we delete it.

Data leaves the EU only where your organisation has allowed a provider outside it (see AI providers as processors above), or when you pay through Stripe and Link, part of Stripe. Where a transfer needs safeguards, we rely on the EU standard contractual clauses (with the UK addendum), or on the EU-US Data Privacy Framework where the provider is certified. For DeepSeek in China there is no adequacy decision; it is used only when your organisation switches it on, and the product says so. Details are available from info@nerix.ai.

Names and numbers hidden before text reaches a provider, an append-only audit log, TLS on every connection, provider keys and connector tokens stored encrypted, a strict per-request Content-Security-Policy, API secrets stored as prefix and hash, and shared conversations that show answers but not the documents behind them. The security page describes each in plain language.

nerix for Chrome is a browser extension that works in Chrome's side panel on the page you are on. This section describes what it reads, what goes to nerix and what stays on your device. The rest of this policy applies to your account and your workspace as usual.

What it reads, and when: the text and structure of the page you are on, only when you ask a question about it, press a quick action, select text and use the nerix button, or start a task; the tabs you choose to include, only when you ask; the names and kinds of the fields of a form, when you ask nerix to fill it; and what you type into the panel. It reads a site only after you have allowed that site, and you can take the access back at any time in Chrome. Nothing is read in the background, and nothing is read on a page you did not ask about.

What goes to nerix: your question and the page text or selection you asked about, which go to your nerix workspace to be answered, through the same central AI service and under the same provider rules as the rest of the product (see AI providers as processors). When you ask nerix to fill a form, the model sees the names of the fields, never the values you fill. When you ask it to act, it sees what it needs to take the next step, such as the visible text and structure of the page. A picture of the page is taken only when a step needs one, and password, card and similar fields are painted out before it leaves your device. Words you speak, when you use the microphone, are sent to your workspace's speech service while you speak. A page, a selection or a table you choose to keep is saved to your library with its address and the time. Each action nerix takes for you is written to your workspace's audit log, with the site and the time.

What never leaves your device: passwords and the contents of password, card, security code and one-time-code fields; pages you did not ask about; your browsing history; sites you have not allowed. nerix does not type into those fields, does not buy, and does not submit, send, pay, sign or delete anything without showing you what will happen and getting your approval. Settings such as your allowed sites are kept in the extension on your device.

nerix for Chrome will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. The data it receives from Chrome is used only to provide the features you see in the extension, for the single purpose of working with the page you are on. It is not sold, not used for advertising, profiling or credit decisions, and not read by people unless you give explicit consent, for example when you send us a support request, or where the law or security requires it.

Your pages, form values and questions are never used to train models, by us or by the providers that answer them, under the terms in Your content never trains models above.

Retention: what the extension sends is stored in your workspace like any other conversation or file, and your organisation keeps it as long as it wants or sets a period in Settings, Privacy. The extension itself keeps your settings and the data of your account on your device, and deletes them when you sign out.

To delete your data: delete the conversation, the saved item or the document in the product, which removes it at once, or erase your account as described under Retention and erasure. To disconnect a browser, use Connected browsers in the product, or remove the extension from Chrome. Questions: info@nerix.ai.

When this policy changes materially, the date above changes with it, and signed-in organisation owners are notified in the product. The current version always lives at this address.