Niuniu Privacy Policy

Last updated: September 17, 2026.

Niuniu connects ChatGPT to a computer that the user explicitly owns or is authorized to control for software-development workflows.

Data processed

For a requested task, Niuniu may process project paths, selected source-code or text content, Git status/diffs, development-command output, and task instructions. OAuth also processes an account username and stores password verifiers rather than plaintext passwords.

Niuniu is not intended to collect payment-card data, protected health information, government identifiers, API keys, passwords, MFA codes, or other authentication secrets as task content.

Purposes

Data is used only to authenticate the connection, route the requested MCP tool call, perform the requested development task, return the result, and protect the service against abuse or operational failures.

Service providers and recipients

Requests originate from the connected OpenAI product. Deterministic file and Git tools are handled without a model-provider call.

When Pi review or execution is explicitly used, the task instructions and minimum task context needed for that operation may be sent to the configured model provider, currently SenseNova. Gateway hosting and network infrastructure providers process traffic as necessary to operate the service.

Retention

• Routine MCP request bodies, source-code contents, diffs, and Pi task output are not stored as persistent gateway access logs after the response is completed.
• OAuth authorization codes are valid for 5 minutes.
• OAuth access tokens are valid for 1 hour; refresh tokens are valid for up to 30 days and are rotated when used. Stored token records contain hashes rather than raw tokens.
• OAuth password verifiers are retained until the corresponding Niuniu account is rotated or removed.
• Gateway error logs are retained through a maximum of 14 daily rotations. Routine Nginx access logging for the Niuniu host is disabled.
• Files and any local agent logs on a connected computer remain under that computer owner's control until the owner removes them.

Reviewer isolation

Plugin-review credentials are routed to a separate reviewer workspace. Both MCP path checks and an operating-system sandbox prevent reviewer tools and Pi from accessing files outside that workspace.

User control

Users can revoke device access by stopping the local Niuniu service or SSH tunnel, can rotate their Niuniu OAuth credentials, and can remove local files or logs on the connected computer.

Contact

Support information is published at the Niuniu support page.