Nairo Privacy Policy

Nairo helps people understand and navigate supported online forms. The user keeps control of data entry, personal decisions, consent, payment, authentication, and final submission.

After you click the Nairo toolbar action, the extension may temporarily process the active tab's URL, title, visible headings, labels, and safe DOM locator metadata to recognize a supported workflow and point to a field. Detection can inspect bounded visible page text locally.

Nairo does not read portal input values, selected or hidden values, uploaded document contents or filenames, screenshots, or serialized page HTML. It does not provide analytics or cross-site tracking.

• activeTab gives temporary access to the page only after you invoke Nairo.
• scripting injects Nairo's packaged interface into that selected page. Nairo does not download remote code.
• storage keeps extension-local state, linked-session metadata, preferences, panel layout, mascot settings, and the approved backend origin.
• nairo-chi.vercel.app access supports Nairo's production API and explicit web-session bridge. The store package has no localhost, wildcard-host, or all-sites permission.

Web sessions, chat history, checklist and stage progress, explicit Information File references, Information Files, document metadata, and preferences are stored in your browser's localStorage. Information File document bytes are not stored.

Sessions are isolated. Nairo does not automatically search another session or attach an Information File. You must explicitly reference a file, and referencing it is separate from choosing a field for chat. A selected value is not sent until you submit the chat message.

When configured, an external OpenAI-compatible AI provider may reword a deterministic explanation. Nairo sends only an allowlisted structure: language, response mode, a safe concept identifier, bounded public verified facts, bounded deterministic guidance, and an output-length limit.

Raw chat, speech transcripts, session identifiers, Information Files, page content, screenshots, portal values, and personal field values are excluded. Official Form 6 knowledge and verified postal or administrative facts remain the bounded source; AI is not permitted to invent or replace them. If the provider is missing, unsafe, unavailable, slow, or invalid, Nairo falls back to deterministic guidance.

Do not send personal values such as a name, Aadhaar or EPIC number, mobile number, email address, date of birth, full address, disability details, or document contents to Nairo chat. The extension uses pattern-based minimization safeguards, but no detector can guarantee that every possible free-text disclosure will be recognized.

Actual OTPs, passwords, passcodes, authentication codes, CAPTCHA answers, CVV/CVC values, card or payment credentials, UPI PINs, and banking PINs are blocked before normal chat persistence or backend routing. Nairo returns a local safety message and does not intentionally store, repeat, log, or transmit the detected raw value. Conceptual questions remain allowed.

Nairo never enters or submits those protected values and never performs CAPTCHA, consent, declaration, signature or thumb-impression, payment, PIN-entry, or final-submission actions.

When you turn the microphone on, Nairo uses the browser or platform SpeechRecognition service. The browser implementation may send audio to an external recognition service under that browser or platform's terms. Nairo receives recognition events and does not capture or persist raw audio buffers.

Foreground transcript text may appear in the composer or runtime-only extension conversation. Ignored ambient speech is discarded by Nairo. Spoken replies use browser or system speech synthesis; a voice may be local or remote. Nairo does not persist generated audio.

A six-digit postal PIN is processed only after an explicit keyboard lookup and confirmation. It is sent to Nairo's postal endpoint, cleared from pending extension state, and never sent to the AI provider. Nairo checks its official local dataset first and may use the Government of India data.gov.in service as a fallback.

Postal results and request-rate data may exist temporarily in server process memory. Administrative lookup accepts bounded state, district, and locality inputs—not a full address. Nairo does not collect device geolocation.

Web workspace records remain in that browser profile until you delete the relevant session, Information File, field, or document reference, or clear site data. Extension state and preferences remain in chrome.storage.local until changed, disconnected, ended where applicable, or cleared through browser controls. There is no Nairo cloud account or database for these records in the current MVP.

Explicit session linking copies only a bounded snapshot such as session ID, title, workflow, stage, status, checklist counts, message count, timestamps, and source URL. It does not copy web chat bodies, Information File contents, or portal form values.

• Vercel hosts the Nairo website and API and processes ordinary network and infrastructure data.
• The configured AI provider processes only the bounded explanation payload described above, under its own terms.
• data.gov.in may receive a postal PIN only when the local official dataset cannot satisfy a confirmed lookup.
• Your browser, operating system, or their service providers may process speech recognition or speech-synthesis data.

Nairo minimizes data at each boundary, uses HTTPS for production API access, restricts the extension background worker to approved POST routes, and does not include remote executable code. No software can promise absolute security.

You can keep the microphone off, stop listening, hide or end guidance, disconnect a linked session, delete individual browser-local sessions and Information Files, remove document references, change preferences, and clear Nairo site or extension data through browser controls. You remain responsible for reviewing the official form and performing final submission yourself.

The current controlled beta is intended for testers aged 18 or older and is not directed to children. This is a beta participation restriction, not a legal age-rating claim.

We may update this notice when Nairo's implementation or providers change. The effective date will be updated with material revisions.

For privacy questions or requests, use the support contact shown on the official browser-store listing from which you installed Nairo. Do not include passwords, OTPs, government identifiers, payment credentials, or other sensitive values in a support request.