Data & Privacy

Qirabot's decision engine runs in your own process; the only thing the model needs to see is the screen. Screenshots go directly from your machine to the Vertex AI endpoint of your own Google Cloud project. The qirabot package makes no network calls to any Qirabot service: it does not require an account or an API key, and it keeps no server-side task store. This page states exactly what crosses the wire.

What is sent to your model endpoint

Each AI step sends to the Vertex AI model you configured, under your Google Cloud project:

• a screenshot of the bound target (JPEG quality 80 by default; see screenshot_format / screenshot_quality in Configuration),
• your instruction text (the natural-language description or task),
• step metadata (action type, parameters, timing).

Content the model extracts from the screen (extract() results, ai() outputs) is produced by that same endpoint and returned to your process. No other party receives it.

What never leaves your machine

• Your code. The model returns coordinates and decisions; actions execute locally through your framework or adapter.
• Cookies, credentials, session state. Qirabot drives your browser or device; it doesn't read or transmit their storage.
• Custom tools. Functions passed via custom_tools run locally. Your endpoints, tokens, and databases are never seen by the model endpoint; only the tool's string return value is fed back to the model. See AI Tasks & Custom Tools.

What stays local

All run data (name, status, steps, and step screenshots) stays on local disk. The HTML report (report.html, full-resolution screenshots/, recording.mp4) is written to ./qira_runs/ on your machine, is fully self-contained, and makes no network calls. Disable it with report=False. With QIRA_ENGINE_TRACE=<dir> set (a debugging aid), the engine additionally writes one JSONL record per model call plus the screenshots into that local directory.

Transport

All model traffic is HTTPS to your configured Vertex AI endpoint, authenticated with your Google Cloud credentials (Application Default Credentials). There is no other network destination.