Privacy policy

1. Scope

Snowfish Technologies (“Snowfish,” “we,” or “us”) provides the Nara desktop apps for macOS and Windows and the companion Chrome Helper (together, the “Services”). Nara helps you work with information on your computer, in your browser, and in accounts you connect. This policy describes the personal information we collect and process in providing those Services, including information about people other than you that appears in your work.

If your employer or another organization provides Nara, it may manage your account, choose which connections are available, set retention rules, and receive information about use of the Services. Snowfish processes work content for that organization under its agreement with us. That agreement may provide additional terms for organization-controlled information. The services you connect to Nara also have their own privacy policies.

2. Information we collect and process

Information you give us. We receive your name, email address, organization, account and subscription details, preferences, requests to Nara, feedback, and communications with our team. Your requests may include conversations, files, documents, messages, calendar entries, and other material you ask Nara to work with. We call that material “Work Content.” Nara's answers, drafts, and completed tasks can also contain Work Content.

Information from connected services. When you authorize a connection, we receive the selected account identity, permissions, connection status, and information needed for the work Nara performs. Depending on the connection and task, that may include email threads, messages, files, workspace pages, calendar details, or records in another service. Finding that an account exists does not by itself authorize Nara to read it.

Browser information. The Chrome Helper can access the page or tab information needed for Nara's disclosed features, including addresses and titles, visible text and controls, navigation and tab state, relevant network results, and the outcome of actions Nara takes. An enabled feature may use limited browsing history to provide context. We do not collect browsing information to build an advertising profile. Nara does not access incognito tabs through the Helper.

Computer context. Subject to operating-system permissions and your settings, Nara can use app and window context, selected screen content, recent work activity, and workflow steps to understand a task or offer help. On Mac, automatic workflow learning is on by default and records relevant control actions and limited non-editable context locally; you can pause it in settings. It does not record typed keystrokes, clipboard contents, passwords, secure-field values, or screenshots for that learning. Browser workflow teaching starts when you expressly ask Nara to record a browser task.

Windows. The Windows app reads the screen when a task needs it. It captures the window in front, reads its text on your PC, and discards the image; only the text and its position on screen leave your PC. It does not read password managers, sign-in or credential screens, chat apps, browser windows, apps you exclude, or a focused password field. The Windows app does not perform automatic workflow learning or the event-triggered screen understanding described in Section 4.

Technical and support information. We process device and app versions, connection state, error codes, performance and security events, and information you choose to send in a support report. Our website host also receives ordinary request information such as an IP address and time of access. This privacy page does not use advertising trackers.

3. How we use information

We use information to provide and secure Nara; set up accounts and connections; understand requests; read, draft, and carry out authorized work; show and save results; remember useful context; recover interrupted tasks; offer relevant help; provide support; measure reliability; manage subscriptions and billing; and comply with law.

Nara may prepare work using access you have already granted. Before it sends an email, invitation, shared post, or another protected external action, it asks you to review the exact content and destination. Nara does not run a learned workflow solely because it observed a pattern. We do not sell personal information, use Work Content or browser activity for targeted advertising, use Work Content to train AI models or authorize our providers to do so for Nara, or use information from Nara to make lending or creditworthiness decisions.

4. How the Chrome Helper and desktop context work

The Chrome Helper's purpose is to connect Chrome to the Nara app on your computer so Nara can read relevant pages and complete browser tasks you request or enable. The Helper communicates with the installed app through a local native connection. Information needed to answer you or carry out a task can then move through the processing paths described below. Nara may work in a tab you identify or open a separate task tab. It does not need to read every open tab to perform one task.

On Mac, Nara also uses bounded, event-triggered screen understanding to decide whether it can offer useful help. This is not continuous screen recording. Captures without a useful match are discarded within seconds. Only redacted text from that screen understanding may be sent for remote judgment; redaction lowers risk but does not guarantee anonymity. You can pause eligible context gathering or exclude supported apps and sources in Nara's settings. Operating-system permissions also control what Nara can access.

5. When we disclose information

Service providers. We use AWS for hosting and confidential AI processing; Anthropic to produce AI responses; TypeSafe for AI decisions, such as routing a request or judging whether help is useful; Composio to operate connections to supported apps; Supabase for account sign-in; Resend to deliver account email; Sentry to receive error and crash reports; and PostHog to measure product reliability. Vercel hosts this website. Each provider receives information needed for its role. For example, an AI provider processes a request and its relevant context, while an email delivery provider receives an address and the account message to send. Sentry and PostHog receive error codes, event names, app and device versions, and a customer identifier, not Work Content. The current list of these providers is at donebynara.com/subprocessors. We use zero-data-retention arrangements for eligible Anthropic and TypeSafe API requests and Composio's zero-data-retention configuration for eligible connected-app tool payloads. These arrangements concern Work Content, not every account, security, or transaction record a provider needs to run its service.

Connected apps and people you choose. When Nara reads or acts in an account you connected, the app receives the request or change under the permissions you granted. An email, post, invitation, or other action you approve is received by its intended recipient. Content you keep in a connected app, such as Gmail or Notion, remains there; Composio's zero data retention does not remove it from that app. Composio does not retain eligible tool request and response payloads after execution, though it keeps the connection and authorization information needed to maintain your connection.

Your organization and legal requests. We may disclose information to the organization that provides your account as allowed by its agreement, or when required by law or needed to protect the Services and their users. Chrome Helper data is shared with your organization only as needed to provide the Services it provides to you. Information other than Chrome Helper data may be transferred as part of a business transaction with applicable safeguards. Chrome Helper data may be transferred as part of a merger, acquisition, or asset sale only with the user's explicit prior consent.

6. How long information is kept

We keep information for the time needed to provide Nara, maintain security, meet contractual commitments, or comply with law. The time depends on the type of information and the feature involved.

• Work stored on your device: Conversations, task results, saved workflows, and corrections remain until you delete them or an applicable organization rule removes them.
• Workflow learning (Mac): Raw relevant control-action evidence remains local for no more than 30 days. Saved workflow definitions and corrections remain until deleted.
• Screen understanding (Mac): Captures that are not useful are discarded within seconds. Judged-useful images remain encrypted and local for no more than 24 hours. Redacted OCR text may remain locally for no more than seven days.
• Screen reading (Windows): The Windows app does not store the screen images it reads for a task.
• AI and connection payloads: Eligible requests to Anthropic and TypeSafe and eligible Composio tool payloads use zero data retention. Where a feature cannot use those arrangements, we choose the least retention compatible with providing it and disclose material exceptions. Zero data retention for a request does not remove necessary account, billing, security, or connection records.
• Service and support records: We retain limited account, connection, billing, security, and operational records while needed for those purposes. A report you choose to send may include a description, selected conversation context, or screenshot and may be kept while we investigate and respond. Legal requirements can require longer retention.

Disconnecting a service stops Nara's future access through that connection; it does not delete content stored in the connected app. Removing the Chrome Helper stops its browser connection but does not delete your Nara account or on-device work state.

7. Security and access to Work Content

We use access controls, encryption in transit, protections for local state (the Keychain on Mac and Windows Data Protection on Windows), and limits on routine diagnostics. For supported AI requests, Nara verifies an attested AWS Nitro Enclave before sending encrypted content to its confidential gateway. The surrounding server forwards the traffic without seeing the plaintext. The enclave handles plaintext while processing the request and passes necessary content to the selected AI provider. Account, billing, connection, and limited operational records remain outside that model-processing boundary. Connected apps and support reports have separate controls.

Snowfish staff do not routinely read Work Content. Authorized personnel may see information you specifically submit for support or when access is needed for security, to comply with law, or under an applicable customer agreement. For Chrome Helper data, human review is limited to your explicit consent to read specific data, security or legal needs, or aggregated and anonymized internal operations. No technical safeguard eliminates every risk.

8. Your choices and rights

You can stop a task or an explicit recording, pause eligible context gathering, exclude supported sources, disconnect connected accounts, and remove the Chrome Helper. You can also review a protected action before it is sent. An organization that manages your Nara account may control some settings and requests concerning organization data.

Depending on where you live, you may have rights to access, correct, export, or delete personal information; object to or restrict certain processing; or withdraw consent where processing relies on consent. To make a request, contact us below. We may verify your identity and coordinate with your organization. We may retain information when a legal obligation or permitted security need requires it. Where available under law, you may also complain to your local data protection authority.

9. Information received through Chrome

To provide the Chrome Helper's disclosed purpose, the extension may handle personally identifiable information, financial and payment information that appears on pages, personal communications, web history, user activity, and website content. It uses that information only to provide or improve its Nara browser features, keep them reliable and secure, or comply with law. It does not sell the information, transfer it for advertising, or use it for lending decisions. Data can pass from the extension to the local Nara app and, when needed for a task, to the providers described in Section 5. Page observations redact values in fields identified as passwords, card numbers, or one-time codes; the Helper also refuses some sensitive-page snapshots.

Nara's use of information received through the Chrome Helper adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

10. Other details

Nara is intended for business users and is not directed to children. Information may be processed in the United States and other countries where our providers operate. Where applicable law requires it, we use appropriate safeguards for international transfers. We may change this policy as Nara changes; we will update the effective date and give additional notice when required.

11. Contact us

Snowfish Technologies operates Nara. For privacy questions or requests, email support@snowfishtech.com. If your organization provides your Nara account, you may also contact its administrator about organization-controlled information.