Privacy Policy

Nira is a browser-based 3D studio. Scene editing and preview run in your browser. Features such as the AI assistant, motion generation, auto-rigging, video generation, saving projects, and billing are handled by our servers and the service providers listed in section 5.

To provide and operate the Service (including sending your prompts and content to AI models to fulfil your requests); to process payments and track usage allowances; to secure the Service and prevent abuse; to send service and, where you have agreed, product update emails; and, with your consent, to understand usage and improve the product — including reviewing the prompts you send the assistant, its replies, any thumbs-up or thumbs-down you give them, and how long and how reliably it responded, so we can find and fix where it falls short. We do not sell personal data, and we do not use your content to train our own models.

We process account, content, and billing data to perform our contract with you; technical and security data on the basis of our legitimate interest in operating a secure service; analytics data and marketing email on the basis of your consent, which you may withdraw at any time; and records we must keep for tax and accounting to comply with legal obligations.

We use the following service providers to run the Service. Each processes personal data only on our instructions and under contractual data-protection terms.

We will update this list before adding a new sub-processor that handles personal data. Business customers may request advance notice of changes.

We operate globally, and your data may be processed in the United States, the European Union, and other countries where our providers operate. Where personal data from the EEA, the UK, or Switzerland is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or the provider's certification under the EU-U.S. Data Privacy Framework, together with supplementary measures such as encryption in transit and at rest.

Business customers who need a Data Processing Agreement (DPA) under the GDPR, UK GDPR, or similar laws can request one by emailing us at the address below. Our DPA incorporates the Standard Contractual Clauses and the sub-processor list above.

Account data is kept while your account exists. Projects, chats, and uploaded or generated files are kept until you delete them or your account. Transient uploads used only for processing are deleted automatically. Billing records are kept for as long as tax and accounting law requires (generally up to 8 years). Analytics data is kept for up to 12 months.

We use encrypted HTTPS connections, encryption at rest with our storage providers, token-based authentication, row-level database access rules, and short-lived signed URLs for file access. No online system is completely secure, and we will notify you and the relevant authorities of a personal data breach where the law requires.

Depending on where you live (including under the GDPR, UK GDPR, California CCPA/CPRA, and India's DPDP Act), you may have the right to access, correct, delete, or export your personal data; to object to or restrict processing; to withdraw consent; and to lodge a complaint with your local data protection authority. To exercise these rights, email us at the address below. We respond within 30 days and will not discriminate against you for exercising them.

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

We may update this policy as the Service evolves. We will post changes here with a revised date and notify account holders by email of material changes.

Nirvana XR

Email: rahul@nirvanaxr.com