Architecture
How WaterrAI Works
Unlike cloud-only AI assistants, WaterrAI runs as a desktop application on macOS and Windows. Your core data stays on your computer. The app communicates with cloud services only when you use features that require them.
Local-First Desktop App
- •Conversations with your AI assistant are stored in a local database on your device.
- •Notes, tasks, to-dos, and preferences are stored locally.
- •Meeting transcripts are stored locally before any optional cloud sync.
- •The app communicates with cloud services only when you use features that require them.
Cloud Services
WaterrAI operates three cloud services, each with a specific and limited purpose:
Core Backend
User accounts, organization management, meeting lifecycle, billing, collaborative features.
Stores: Account info, org data, meeting metadata, billing records.
Model Routing Service
Routes AI requests to language model providers. Acts as a secure proxy — authenticates, applies rate limits and PII masking, then forwards.
Stores: Does not store conversation content. Passes through in real-time.
Meeting AI Service
Real-time meeting transcription and AI meeting agent pipelines.
Stores: Meeting session data during active meetings only.
Third-Party AI Providers
When you ask your assistant a question, only the conversation context needed for that specific request is sent to the provider. Your account credentials, billing information, files, and unrelated data are never included.
What Stays vs. What Leaves Your Device
Stays on your device
- • Conversation history database
- • Notes, tasks, and knowledge base
- • Contact and people information
- • Screenshots and workspace context
- • App settings and preferences
- • OS-level credentials and local API keys
Leaves only when needed
- • Conversation context → AI provider for inference
- • Meeting transcript → AI provider for summarization
- • Account authentication → Core Backend
- • Optional cloud features → when you enable them
Data Access
What Your AI Assistant Sees
Every category of data WaterrAI can access — when it accesses it, where it's stored, what leaves your device, and what controls you have.
Screen Captures
What
Screenshots of your display to understand what you're working on and provide contextual assistance.
When
Only when the screen capture feature is active and you have granted OS-level screen recording permission.
Storage
Processed and stored locally on your device as compressed images.
Leaves device
May be sent to AI providers as image input when the assistant needs visual context for your request.
Controls
Revoke OS-level screen recording permission at any time. Disable the feature within WaterrAI settings.
Meeting Transcripts
What
Real-time speech-to-text transcription. Works primarily with text transcripts. Audio/video recording is a separate opt-in feature.
When
Only during active meetings where the notetaker or meeting AI agent is running.
Storage
Stored in your local database. Optionally synced to cloud for collaborative features.
Leaves device
Transcript text sent to AI providers when you request summarization or analysis.
Controls
Instant pause stops transcription immediately. Consent notification can be sent to participants. Delete any transcript at any time.
Emails and Calendar Events
What
Email metadata and content (Gmail, Outlook) and calendar events (Google Calendar, Outlook Calendar).
When
Only when you explicitly connect these integrations via OAuth. No data is accessed until you authorize.
Storage
Synced to your local database. OAuth tokens stored server-side with encryption.
Controls
Disconnect from within WaterrAI or revoke access from your Google/Microsoft account. Each integration is independent.
File System Access
What
Read and write files when you ask the assistant. Import notes from Apple Notes, Evernote, Obsidian, OneNote, Notion.
When
Only when you explicitly ask. The assistant does not passively scan your file system.
Leaves device
File contents sent to AI providers when you ask questions about files. Uploaded documents indexed as numerical vectors.
Controls
AI agent requests permission before file operations. Parental Controls can restrict file system access entirely.
Browser Activity and Control
What
Through the optional browser extension, WaterrAI can observe and interact with browser tabs.
When
Only with the extension installed and active. Every action surfaces for your approval before execution.
Controls
Permission-first architecture — every action requires explicit approval. Uninstall the extension to completely disable.
Keyboard and Mouse Activity
What
Presence detection only — determines whether you are actively using your computer or idle.
Not a keylogger
Does not record which keys you press, what you type, or where you click. Detects presence of activity, nothing more.
Controls
Requires Accessibility permission on macOS. Deny or revoke this permission to disable entirely.
Application and Window Tracking
What
Tracks which application is in the foreground and active window title for contextual assistance.
Storage
Tracked and stored entirely on your local device.
Controls
Can be disabled in settings. Enterprise administrators can restrict agent context collection.
Conversation History
What
All conversations with your AI assistant — every message, response, and interaction.
Storage
Local database on your device. Includes role, content, timestamp, and topic.
Leaves device
Recent conversation context sent to AI providers for continuity. Historical conversations not in the active thread are not transmitted.
Controls
Delete individual conversations or wipe all history. Deletion is permanent and cascade-removes all associated messages.
Contact and People Data
What
Contact information aggregated from connected services (Gmail, LinkedIn, calendar) to build a local contact graph.
Storage
Entirely in your local database on your device.
Controls
Disconnect source integrations to stop aggregation. Delete contact data at any time.
External App Integrations
What
Through Composio (800+ apps) and Pipedream (2000+ apps), connect to services like Salesforce, Slack, GitHub, Jira, HubSpot, and more.
When
Only when you explicitly authorize each integration via OAuth. No service accessed without permission.
Data flow
Actions executed through our Model Routing Service. WaterrAI sees only the data returned by specific API calls you authorize.
Controls
Each integration independently connectable/disconnectable. Permission-first execution for all actions.
Security
How We Protect Your Data
Multiple layers of protection — from OS-level encryption to PII masking before AI inference.
Encryption
At Rest
In Transit
localhost only — not accessible from your network or the internet.Authentication and Authorization
User authentication
OAuth 2.0 via Google, Microsoft, and LinkedIn. No passwords stored by WaterrAI.
Session management
JWT tokens with 24-hour expiry. Re-authentication required daily.
Desktop-to-cloud
Unique API keys validated against Core Backend on every request.
Role-Based Access Control
Organizations can assign roles — user, admin, manager, super admin — each with defined permission boundaries.
Rate Limiting and Abuse Prevention
- •Per-user rate limiting, configurable per-minute, per-hour, and per-day.
- •Backed by Redis with automatic in-memory fallback for high availability.
- •Request timeouts enforced (120 seconds maximum for AI inference).
- •Automatic retry with exponential backoff.
Permission System
OS-Level Permissions
- • Screen recording
- • Accessibility
- • System audio recording
- • File system access
Cannot be bypassed by the app.
Agent Permission-First
- • Every action surfaced for approval
- • No autonomous actions without consent
- • Enterprise admins can pre-approve or block categories
PII Protection
Before conversation context is sent to AI providers, WaterrAI's PII masking service can automatically detect and redact:
Configurable per category. Add your own protected terms that get replaced with [PROTECTED].
Input Validation and Safety
- Dangerous shell command patterns blocked automatically.
- Path traversal protection on file operations.
- Input length limits on HTTP requests.
- Execution timeouts enforced (60 seconds default).
- Output truncation at 10KB to prevent memory exhaustion.
AI & Training
We Do Not Train AI Models on Your Data
WaterrAI does not use your data to train, fine-tune, or improve any AI models. Period.
We are a consumer of AI APIs, not a model trainer. Your data passes through our routing service to the AI provider and back — we don't store conversation content, and providers contractually commit to not using API data for training.
WaterrAI Desktop App
Stores your data locally. Does not transmit except for features you use.
Model Routing Service
Passes requests to AI providers and returns responses. Does not store conversation content.
AI Providers
Process your request and return a response. Under API terms, they do not use data for training.
Provider-Specific Policies
Token usage is metered for billing purposes only — we track usage counts, not content.
Data Lifecycle
Where Your Data Lives and How Long We Keep It
Local Storage (Your Computer)
Format
SQLite databases, encrypted vault files, compressed images.
What's stored
Conversations, messages, notes, tasks, contacts, meeting transcripts, app settings, workspace context.
Retention
Data persists until you delete it. No automatic expiration or silent cleanup.
Deletion
Delete individual items from within the app. Uninstalling removes the app data directory and all local data.
Cloud Storage (Our Servers)
Location
Azure cloud infrastructure.
What's stored
User accounts, organization data, meeting metadata and transcripts (for collaborative features), billing records.
Retention
Active as long as your account exists. Billing records retained per legal requirements.
Deletion
Request via [email protected] or in-app account settings. Processed promptly.
File and Vector Storage
Azure Blob Storage
Files you upload for document processing (PDFs, presentations, images). Not your local files.
AWS S3
Meeting recordings — only created when you explicitly initiate recording.
Vector Index
Numerical vector embeddings for semantic search. Does not store raw text — only mathematical representations.
Your Deletion Rights
A single conversation
Delete from within the app — permanent, cascade-deletes all messages.
All conversations
Clear history from app settings.
A meeting transcript
Delete from the meetings section.
Your entire account
Email [email protected] or use in-app account deletion.
Local data only
Uninstall and reinstall the app, or clear the app data directory.
A connected integration
Disconnect it — revokes access and stops data flow immediately.
Enterprise
For Security and Compliance Teams
Information for IT administrators, security teams, and compliance officers evaluating WaterrAI for organizational deployment.
Multi-Tenant Organization Model
- •Organization isolation with membership-based access control.
- •Role-based access: user, admin, manager, super admin — each with defined permission boundaries.
- •User management: invite, remove, and manage team members. Role changes take effect immediately.
Administrative Controls
Agent action audit trail
Every permission request, approval, and denial logged with timestamp, user identity, and context. Exportable.
AI memory management
Admins can audit, review, or wipe AI agent memory per user or across the organization.
Usage monitoring
Real-time token usage metering per user, per team, per plan — with remaining balance tracking.
Integration policies
Define which teams or individuals can access which external integrations.
Content restrictions
Configure content filtering levels and restrict agent capabilities as needed.
Compliance
GDPR
- Data minimization: collect only what's needed.
- Purpose limitation: data used only for its collected purpose.
- Right to erasure: delete your data at any time.
- Meeting transcription consent workflows built in.
DPDP Act 2023 (India)
- WaterrAI Lab Private Limited is registered in Rajasthan, India.
- Compliant with data principal rights, consent management, and purpose limitation.
CCPA (California)
- Right to know what personal information is collected.
- Right to request deletion and opt out of sale.
- WaterrAI does not sell personal information.
Data Residency
Core Backend
India (primary), Azure global cloud.
AI model inference
Anthropic (US), OpenAI (US), Google (global).
File storage
Azure Blob Storage (configurable region).
Desktop app data
Your local device (wherever you are).
Enterprise customers with specific data residency requirements: contact us to discuss dedicated deployment options.
Integration Security
- All integrations use OAuth 2.0 with scoped permissions.
- Minimum permissions requested — no blanket access to your accounts.
- OAuth tokens stored server-side with encryption. Revocable at any time.
- Connected services auditable and manageable by organization administrators.
Vendor Assessment Support
- Security questionnaires available on request.
- Available for vendor security review calls with your IT and security teams.
- Architecture documentation and data flow diagrams provided under NDA.
Personal Assistant
Your AI, Your Rules
How WaterrAI works as a personal assistant you can trust — with full control over what it sees, remembers, and does.
What Makes WaterrAI Different
Most AI assistants are cloud-first: your data lives on someone else's servers. WaterrAI is different.
The Permission Model
WaterrAI asks before it acts. Every significant action requires your explicit approval:
Reading your files
Tells you which file and why before accessing it.
Controlling your browser
Every click, navigation, and form fill shown for approval.
Sending emails
Drafts presented for your review before sending.
Making API calls
Actions on external services require your confirmation.
Accessing your screen
Requires OS-level permission only you can grant.
You can deny any action, and the assistant respects it immediately — no re-prompting, no workarounds.
What Your Assistant Remembers
Conversation history
Local database
Active workspace context
Local — which app you're in
Notes and knowledge pages
Local database
Contact information
Local, from connected services
Tasks and to-do lists
Local database
Meeting transcripts
Local, optionally cloud
Every category is independently deletable. Nothing is permanent unless you choose to keep it.
Parental Controls
- Content filtering: Three levels — Off, Moderate (teenagers), Strict (under 13).
- Feature restrictions: Disable web access, file system access, or specific agent actions.
- Usage time limits: Daily limits that automatically enforce breaks.
- PIN protection: All settings locked behind a PIN only the parent knows.
Connected Services
- •Nothing connects without your explicit OAuth authorization.
- •See all connected services in your settings with clear labels.
- •Disconnect any service at any time — revokes token immediately.
- •Minimum permissions only — no blanket access to your accounts.
Contact
Security Contact and Incident Response
Report a Security Vulnerability
If you discover a security vulnerability in WaterrAI, please report it responsibly. Do not open public issues for security vulnerabilities.
General Inquiries
Company Information
WaterrAI Lab Private Limited
A21-C, Behind Gold Souk Mall
Saraswati Nagar, Jaipur
Rajasthan 302017, India
Changelog
Transparency Page Changelog
A running log of material changes to this page so you can track how our practices evolve.
May 2026
Initial publication of Transparency & Trust Center.
This page is a living document. If anything is unclear, reach out to us at [email protected].