How Niki handles your team’s data
Niki separates your organisation’s workspace from other companies while using shared provider infrastructure for model inference. Workspace storage, model processing and connected services have different boundaries.
Separate company workspaces
Each paid organisation has its own physical Niki runtime, database and storage on Niki-operated infrastructure. Conversations, files and results belong within that organisation’s environment. This separation does not mean a dedicated model or exclusive model-provider infrastructure: inference is shared at the provider layer.
Your workspace administrator manages membership and permissions. If your employer provides the workspace, it determines the purposes of processing its workspace content. Contact the administrator about the organisation’s own rules for what you may upload or retrieve.
Workspace hosting and AI processing in the EU
Niki is developed in Austria. Workspace hosting and AI model processing take place in the EU. Niki uses Orq with model routing restricted to EU inference endpoints, including fallback models, embeddings and vision processing.
Services you connect may process data outside the EU under their own terms and settings. The Privacy Policy explains processing locations for connected services and other service providers, and how to request details about destinations and safeguards.
Model training and connected tools
Your prompts, files and responses are not used to train models by Niki, Orq or the selected model providers. Processing material to answer a task is different from using it for model training. Services you connect have their own terms and settings for handling data.
Connected services can supply messages, calendar entries or documents within the permissions you grant. A connection does not override your existing account rights. Enable only the tools a task needs; instructions inside a retrieved email, document or model response cannot grant new authority.
Retention and deletion have their own scope
Disconnecting a service or closing a tab does not itself delete previously imported content. Workspace content, billing records, backups and provider-held information can have different retention arrangements. The full Privacy Policy describes the applicable categories and how to request erasure or information.
Niki is operated by Xaver Drabik in Vienna, Austria. Contact [email protected] about privacy or processing details, and your administrator about organisation-controlled content. The imprint identifies the operator; this explanation supplements the Privacy Policy without replacing it.
Mobile privacy and account controls
Photos and files are optional and supplied through the system picker. Before new AI requests, the mobile app shows the selected workspace’s configured AI gateway recipients and asks for permission to share messages, relevant history, instructions, selected attachments and relevant tool content. Decline or withdraw this workspace permission in Settings → AI and privacy. Withdrawal stops new AI calls; calls in progress may finish and data already sent is not erased.
Report response sends a bounded copy of the saved AI answer, your reason, optional details and account/message references for review by authenticated workspace administrators. It does not send a complaint to the AI provider. The Privacy Policy explains these recipients and data categories.
Request permanent account deletion directly in Settings → Security with your current account password and explicit confirmation. The app saves a request reference and shows processing status. A named operator reviews fulfillment, shared ownership and retention; receipt does not immediately erase data or cancel a subscription. Niki aims to respond to your account email within 30 days and explain any required steps or retained data.