Privacy Policy

1. Data we collect

Account and identity data: when you sign in with Google we receive your name, email address, and a stable account identifier from our authentication provider. We do not receive your Google password.

Billing data: prepaid balance, voucher redemptions, and metered usage records. Card and crypto top-ups are not currently available, so we do not currently collect card-transaction metadata. If a card method is introduced later, we will identify its processor and publish the applicable privacy disclosures before use; full card details would be handled by that processor, not by us.

Usage and operational data: the resources you provision, request logs, metering events, AI token counts, and security/audit events needed to run, bill, and secure the platform.

Content you provide: applications, container images, databases, support messages, and — for the AI API — the prompts and completions processed to return a response and meter usage.

2. How we use data

We use your data to provide and operate the Services, authenticate you, meter and bill usage, provide support, secure the platform and investigate abuse, comply with law, and communicate with you about your account.

We do not sell your personal data, and we do not use your content to train models without your explicit instruction.

3. Cookies

We use only essential cookies needed for sign-in sessions and to remember your language preference. We do not run third-party advertising or analytics trackers on the marketing site at this time. If that changes, we will update this policy and provide any consent controls required by law.

4. Sharing and processors

We share data only with the service providers needed to run the platform — including our authentication provider and infrastructure, storage, and CDN providers — each acting on our instructions, and with authorities where required by law. Card top-ups are unavailable, so we do not currently use a card-payment processor. If one is introduced later, we will identify it in our disclosures before that method is available. We do not sell personal data.

5. Data retention

We keep account, billing, and audit records for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and security obligations. Provisioned resources and their data may be deleted after suspension and a grace period as described in the Terms. AI prompts and completions are retained only as needed to deliver and meter the service and to investigate abuse, then deleted or aggregated.

Concretely: account and billing records are retained for the life of your account and for up to seven (7) years afterward to meet accounting and tax obligations; operational and security/audit logs for up to twelve (12) months; and AI prompts and completions for up to thirty (30) days, after which they are deleted or aggregated.

6. Security

We apply tenant isolation, least-privilege access, network controls, and the backup controls documented for each eligible service. No system is perfectly secure; you are responsible for securing your own application code, secrets, access, and independent copies of critical data.

7. Your rights

Subject to applicable law, you may request access to, correction of, a copy of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact us at [email protected]. We will respond within the period required by applicable law.

Where required, the data controller is Alawadi Cloud & DataCenters Colocation Services LLC and the supervisory authority for complaints is the competent authority in the United Arab Emirates.

8. International transfers and children

Customer workloads run in our live UAE region today. Syria and Jordan are planned regions only and do not currently process customer workloads. Limited account, support, security, or service-delivery data may be processed by providers outside the UAE, and eligible services may store encrypted off-site backup copies with their storage provider. Where required, we rely on appropriate safeguards for these transfers. The Services are not directed to children under the age required by applicable law, and we do not knowingly collect their data.

9. Changes to this policy

We may update this policy and will post the revised version with a new effective date.