Privacy Policy
Who we are
Nimira is operated by Dimitri Khvedelidze (sole proprietor, Georgia). Contact: founder@nimira.io
What we collect
Nimira is designed to collect as little personal data as possible:
- Session data — your conversation with the AI curator and the resulting analytical report, stored under a randomly generated session ID. If you tell Nimira your name during the interview, that is stored with the session. If you save a report or sign in for matching, we also have your email.
- Payment data — if you purchase a report, payment is processed by Paddle.com or, for crypto, NOWPayments. We receive only a transaction confirmation. We never see or store your card or wallet details.
- Technical data — standard server logs (IP address, browser type) retained for up to 30 days for security purposes.
- How you found us — the source of the link you arrived from (campaign/referral tags, the referring site's domain) and an anonymous, randomly generated visit identifier with no personal information in it — used only for our own statistics on what's working.
How we use your data
- To provide the relational analysis service
- To generate and deliver your report
- To process payments via Paddle or NOWPayments
- To maintain and improve the service
Encryption
Data is encrypted in transit (TLS) and at rest (Fernet: AES-128 + HMAC). Your session is identified only by a random ID stored in your browser.
Data retention
Apart from the matching waiting list described below, there is currently no automatic deletion schedule. We will delete your data on request — email founder@nimira.io with your session ID (or the email tied to your account, if any).
If you explicitly save your profile for compatibility matching, we additionally keep your city, country, who you're looking for, and your email for longer than the usual period — only so we can match you once that feature opens. You can withdraw this at any time from your report page; withdrawing deletes those preference details immediately.
Matching waiting list
If you ask to be notified when partner matching opens in your area, we store: your email address, the city you entered, the country, the approximate coordinates of that city (taken from a public city database — not your device location), your language, and where you came from (referrer and campaign tags, plus the anonymous visitor ID described above). If you were in a conversation at the time, we store its session ID so we can connect the two.
We use this for one purpose: to tell you, once, when matching starts near you, and to count how many people are waiting in each area. Matching needs roughly 250 people within about 50 km before it can work at all.
We do not sell this list, we do not use it for marketing, and we do not share it with anyone beyond the providers listed below.
Removing yourself. Every confirmation email contains a removal link. Following it deletes your email address, the city as you typed it, your visitor ID, campaign tags and session ID outright — an actual deletion, not a flag. We keep only an anonymous row: the city identifier, country, language and the dates you joined and left, so the per-area counts stay correct. That row cannot be traced back to you. You can also write to founder@nimira.io and we will do the same.
Retention. We keep your entry until you remove it, and in any case no longer than two years after it was last updated. After that it is erased automatically, in exactly the same way, leaving only the anonymous row.
Third parties
We share data with the following providers, each for a specific purpose:
- Paddle.com — card payment processing (Merchant of Record). Paddle Privacy Policy
- NOWPayments — cryptocurrency payment processing, for users who choose to pay that way.
- Google (Gemini API) — the AI model that conducts the interview and drafts your report. Your conversation is sent to Google for this purpose.
- Anthropic (Claude) — a backup AI model, used only if Google's is unavailable.
- Resend — sends transactional email (your report is ready, sign-in links). Your email address is shared with Resend to deliver these.
- Replicate — generates the illustrated portrait sketch used by the partner-matching feature. Matching is not currently offered, so this is not in use.
- DigitalOcean — server hosting (Frankfurt region, EU).
We have not independently verified any provider's claims about whether they train their own models on data sent to their API, so we make no claim about that here.
Your rights
Under GDPR and applicable Georgian law, you have the right to access, correct, or delete your data. Requests should include your session ID (and the email tied to your account, if any). Contact: founder@nimira.io
Cookies
We use only a single localStorage entry to remember your session ID. No tracking cookies, no advertising pixels.
Changes
We may update this policy. Material changes will be noted on this page with an updated date.