What we do with your data.

What Nimbus stores

Only what you put in, connect, or say yes to.

• Your profile: facts and rules you approved, your spaces and what they're for, skills, sources, and documents you upload.
• Contacts and tasks: the people you work with, and your to-do list.
• What your connected apps return. When Nimbus checks Gmail, Calendar, QuickBooks or another app you connected, it reads recent items so it can suggest updates. Nothing from them joins your profile without your yes.
• Your Nimbus chats, so you can pick up where you left off.
• Activity: a receipt for every check, and the text of anything you approved to go out, so you can see what went out and why.
• Your account details: your name and email, your plan, and how much of this week's allowance you've used.

What Nimbus does not keep

• Drafts nobody approved. A draft that's checked and not approved is handed back. Nimbus keeps a receipt with a fingerprint of it, not the text.
• Your passwords. Sign in is handled by WorkOS, and your connected apps' sign-ins are held by Composio. Nimbus never sees either password.
• Your card number. Stripe holds it.
• Anything you didn't confirm in your profile. A suggestion you skip is dropped.

Who else handles your data

Nimbus uses a few services to run. Each gets only what it needs.

• Anthropic runs the AI in the Nimbus chat and in its checks. It sees the part of your profile and apps a reply needs, and doesn't train on it.
• Composio holds the sign-ins for the apps you connect and passes their data to Nimbus.
• WorkOS handles sign in. Stripe handles payments.
• Vercel hosts the website and counts page visits, without cookies and without knowing who you are. Cloudflare carries traffic to the server. Resend sends emails such as bug reports.
• Telegram, only if you choose to talk to Nimbus there.

None of them may sell your data or use it for their own products.

Where it lives

On a server we run in the US. It's backed up every night, encrypted, to a separate storage provider. Nimbus is still in beta, so don't put regulated or highly sensitive data in it yet.

Who can see it

You. That is the default and it stays the default.

On Business and Team, you can add people to your team by email or a one-time link and choose which spaces each can see and change. They see only those spaces, not the names of the others. You can take access back at any time, and it ends right away. Only you can delete your account.

Your own AIs, like Claude and ChatGPT, see your profile once you connect them, and each connected app is limited to the spaces you pick.

Getting it out, and getting rid of it

Export hands you everything stored: your facts, your rules, and your receipts. It is read only and there is nothing to confirm.

Forget deletes your account and everything in it. Run it with no arguments first and it deletes nothing, it tells you what is stored so you can read it back before you decide.

Neither requires asking anyone, including me.

How your content is used

Your content is used only to run Nimbus for you. It is not sold, nobody at Riley AI Systems reads it to improve the product, and it doesn't train anyone's AI model. If you send us a bug report, we read what you sent.

Payments

Payments go through Stripe. Stripe holds your card details; Riley AI Systems sees your name, email, billing address and what you paid, and never your card number.

No uptime promise

There's one server, so when it's down it's down. Backups run once a night, so up to a day of changes could be lost. If something breaks, email me and the person who built it will answer.

What a receipt proves, and what it does not

Every check Nimbus runs leaves a signed receipt in your Activity.

It proves the check ran, which claims were measured, what they were measured against, and the result.

It does not prove that the records checked against were true, that they came from where the sender said, or that everything in the document was checked. A receipt names what it measured and what it did not, and the second part is the part worth reading.

The other half of this is the terms of service, which covers what Nimbus promises and what it does not.

Nimbus is operated by Riley AI Systems, Fargo, North Dakota. Questions to conner@rileyaisystems.com. Last updated 24 October 2026.