Privacy Policy

What we collect

Account information: your email and workspace name. Content: the prompts, documents, and helper configurations you submit. Usage data: model, token counts, latency, and timestamps for each request (our audit log). Payment information:handled by Stripe. We store only your subscription status and a Stripe customer reference, never your full card details.

How AI requests are handled (the sovereignty model)

Protected (SUDO-hosted). Requests to our open-source models run on infrastructure we operate. Your data stays within your isolated tenant and is never used to train any model.

External (your keys). If you connect your own Anthropic, OpenAI, or Google key, requests you route to those providers are sent to them and governed by their privacy terms. We log the metadata (provider, model, tokens) but the content is processed by the chosen vendor.

Private (AI Box). If you run an AI Box on your own network, its requests are processed on the Box. Your proposal lists any outside connections the setup uses.

How we use information

To provide and operate the Service, process AI requests, enforce plan usage limits, maintain your audit log, process payments, provide support, and secure the platform. We do not sell your personal information, and we do not use your content to train models.

Service providers

We rely on a small set of processors to run the Service: Supabase (authentication and database), Vercel (application hosting), Stripe (payments), Together AI (open-source model inference for the Protected tier), an outside image provider for marketing images (each image is labelled External), and the third-party AI providers you choose to connect. Each processes data only as needed to provide their part of the Service.

Security

Each tenant's data is isolated at the database level (row-level security). Any provider API keys you add are encrypted (AES-256-GCM) before storage and are decrypted only server-side at request time. They are never exposed to the browser and never logged. Connections are encrypted in transit (TLS).

Data retention and your rights

We retain your account, content, and audit logs while your account is active. You can delete chats at any time. To request access to or deletion of your data, or to close your account, email us and we will act on your request as required by applicable law.

Cookies

We use only essential cookies required to keep you signed in. We do not use third-party advertising or tracking cookies.

Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from children.

Changes

We may update this Policy from time to time. Material changes will be reflected in the effective date above and, where appropriate, communicated to you.

Contact

Privacy questions? Email sudo@sudo.digital.