NanoAI Cloud privacy notice

Last updated November 5, 2026

Omega AI LLC ("Omega AI", "we", "us"), of Louisiana in the United States, runs NanoAI Cloud (called Nano Cloud in the app): the hosted AI model that NanoAI, the app on your PC, can use, and the account pages at cloud.omega-dev.uk. This notice says what NanoAI Cloud keeps about you, why, and what you can do about it. The NanoAI app itself keeps your conversations, memory and files on your PC; its own privacy policy is at omega2ai.com/nanoai/privacy.

What passes through but is not kept

When NanoAI uses NanoAI Cloud, it sends what each request needs to be answered. That can include your messages, earlier parts of the conversation, memories, screenshots, files and the results of tools NanoAI used, such as an email's contents. NanoAI Cloud passes the request to the AI model and the answer back to you. It does not store the content of requests or answers, and it asks the model provider not to store them either. On the way, Cloudflare, which runs our network connection, decrypts and re-encrypts requests and answers to pass them to our server; it does not keep them.

What we keep

• Your account: your verified email address, the user id our sign-in provider gives you, when the account was made, your plan (including any plan we gave you directly, with a note why), and when you agreed to these terms at checkout.
• Linked PCs: the name NanoAI gave each PC, when it was linked and last used, and a one-way hash of its access token, never the token itself.
• Usage: for each day and each billing period, how many calls and how much model use your account had, to apply your plan's allowance.
• Call records: for each call, its time, the PC and NanoAI install it came from, the request id the model provider gave it, whether it succeeded, its size, and whether the provider's content filters or our abuse rules flagged it. Call records are deleted after 30 days.
• Billing: your Stripe customer id; your subscription's status, plan and billing period; and the usage resets you bought. Stripe holds your payment details; we never see your full card number.
• Account status: whether your account is suspended or blocked, and a record of each action taken on it and why, kept while the account exists.
• Your NanoAI install: NanoAI checks for updates with a random id it made for your install and its version number. For each install id we keep the days it checked for updates or used NanoAI Cloud, with its version, and, before your PC is linked, how much model use it had each day: to plan releases and keep usage limits. These are deleted after 90 days. If an install is blocked for abuse, its id is on our blocklist.
• Network addresses: our servers see your IP address when you connect. NanoAI Cloud uses it briefly to limit how fast requests come. It keeps it only when a call comes without a NanoAI install id or a PC-linking attempt fails: in call records and in that day's usage, both deleted after 30 days. If an address is blocked for abuse, it is on our blocklist until the block is lifted, and in the alert and the record of that action, kept for a year.
• Messages to us: if you email us, we keep the email and our reply to help you. If you report a problem from NanoAI (Settings, Nano Cloud), we keep what you write, its kind, when you say it happened, and your account (or, before your PC is linked, its install id; or, when NanoAI sends none, a one-way hash of your network), so we can look into it.
• Server logs: times, account, PC and install ids, partly hidden email and network addresses, how much model use each call had, and errors; never the content of requests or answers. Deleted after 30 days.

Why we use it

• To provide NanoAI Cloud, link your PCs and apply your plan's allowance (to perform our contract with you).
• To bill you and keep the records the law requires (contract, and legal obligation).
• To keep NanoAI Cloud secure and stop abuse (our legitimate interest in running a safe service, and the rules of the services it is built on).
• To answer you when you contact us.

We don't sell your personal information, share it for advertising, or use your content to train AI models.

Checks for abuse

Requests are checked by the model provider's content filters, and calls by NanoAI Cloud's own rules, which look only at the call records above, never at content. An account can be suspended automatically while we review what happened; an automatic suspension lasts up to 24 hours unless we extend it after that review. What the filters find in a request NanoAI sent (which can hold an email or web page someone else wrote) never suspends an account by itself. When something needs our attention, an alert goes to Omega AI: on our private monitor with your email address, and to our phone through the ntfy notification service with your email address partly hidden and, for an alert about a PC or network address, its install id or the address partly hidden. Tapping an alert opens our monitor, so its link carries your account id. Alerts are kept for a year.

Who else handles your data

• Microsoft Azure runs the AI model. Your requests are sent to it to be answered and are checked by its content filters. NanoAI Cloud uses Azure's global processing: data Azure stores is kept in the United States, but a request may be processed in any Azure region. Under Microsoft's terms, your requests and answers are not used to train its models or shared with other customers; Microsoft may keep requests its abuse monitoring flags, for a limited time, for review. When we turn these on, NanoAI Cloud also sends Azure a one-way hash of your account (so Microsoft can tell us which account a flagged request came from) and of your PC (so its requests reach the same prompt cache); never the ids themselves.
• Clerk handles signing in, and keeps your sign-in details. If you sign in with Google, Google tells Clerk your name and email address.
• Stripe handles payments and keeps your payment details and billing history.
• Cloudflare runs our network connection. It decrypts and re-encrypts the traffic between you and NanoAI Cloud, including requests and answers, to pass it to our server, and sees your IP address. It does not keep the content.
• ntfy carries alerts to our phone, as described above.

Each handles your data under its own privacy terms. We may also share information when the law requires it, to protect people from harm, or as part of a sale or reorganization of our business, in which case this notice keeps applying to it.

How long we keep it

• Call records and server logs: 30 days.
• Your account, linked PCs, usage, billing and account status: while your account exists. Billing records Stripe keeps for as long as tax and accounting law requires.
• Your install's update checks, and its usage before your PC is linked: 90 days. Usage of calls that came without an install id: 30 days.
• Problem reports you send from NanoAI: while your account exists, or one year when no account sent them.
• Alerts, and records of actions on installs and network addresses: one year.
• Copies in our backups: up to 14 days after something is deleted.
• When your account is deleted, we keep its account id, a one-way hash of its sign-in id (so the same sign-in is refused rather than quietly making a new account), the date and a record of the deletion. If your account was blocked for abuse, we also keep its email address and sign-in id on our blocklist, so the block stays in place.

Where it is kept

NanoAI Cloud runs on our servers in the United States, and our providers process data in the United States and, for Azure as described above, possibly elsewhere. If you are outside the United States, your data is transferred there.

Security

Connections to NanoAI Cloud are encrypted with HTTPS. PC access tokens are stored only as one-way hashes. Our records and their encrypted backups stay on Omega AI's own equipment in the United States, and only Omega AI can open them.

Your choices and rights

• See and change: your account page shows your plan, your use and your linked PCs, and lets you unlink a PC or manage your subscription. Change your email address where you sign in.
• Get a copy: email us and we send you everything NanoAI Cloud keeps about your account, with what our sign-in provider (Clerk) and payment provider (Stripe) keep about you.
• Delete: email us to delete your account. We cancel your subscription at once, without a refund for the rest of the period, and delete your account, linked PCs, usage, call records and reports, your sign-in at Clerk and your customer record at Stripe, except what the section above says we keep.
• Object or ask us to stop: email us about any use of your data.

Email nanoai@omega2ai.com from the address on your account. We answer within 30 days. If you are in the European Union or the United Kingdom, you can also complain to your data protection authority. If you live in California or another US state with a privacy law, you have the rights that law gives you, and we will not treat you differently for using them; we don't sell or share personal information as those laws define it.

Children

NanoAI Cloud is for adults. Nobody under 18 may have an account, and it is not directed at children under 13. If you believe a child has given us personal information, email us and we will delete it.

Changes

When this notice changes, we update the date at the top. If a change matters to you, we tell you by email or in NanoAI at least 14 days before it takes effect.

Contact

Omega AI LLC, Louisiana, United States: nanoai@omega2ai.com.