Privacy Policy

1. Introduction

Cassian Technologies ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our GPU cloud platform ("Platform").

Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

We collect information that you provide directly to us, information collected automatically, and information from third-party sources.

2.1 Information You Provide

• Account Information: Name, email address, and authentication details when you create an account
• Usage Data: Commands executed, instance configurations, and resource usage on the Platform
• Files and Code: Any files, code, or data you upload to or create within your GPU instances and volumes
• Communications: Information you provide when contacting us for support or feedback
• Payment Information: Billing details processed through our secure payment providers

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, and device identifiers
• Platform Telemetry: Instance uptime, GPU utilization, storage usage, and resource allocation metrics
• Cookies and Tracking: Information collected through cookies, pixels, and similar technologies
• Log Data: Server logs including access times, error logs, and API call metadata

2.3 Information from Third Parties

• Authentication Providers: Profile information from Google OAuth or other identity providers you use to sign in
• Payment Processors: Transaction confirmations and billing status

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Services: Provision GPU instances, manage volumes and storage, and deliver Platform features
• Billing: Track resource usage, calculate charges, and process payments
• Communication: Send usage alerts, billing notifications, and respond to support inquiries
• Improve Services: Analyze usage patterns to enhance Platform performance and reliability
• Security: Detect, prevent, and address fraud, unauthorized access, and abuse
• Compliance: Meet legal obligations and enforce our terms

4. How We Share Your Information

We may share your information in the following circumstances:

• Service Providers: Third-party vendors who assist in operating our Platform (cloud infrastructure, analytics, email services)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect our rights, privacy, safety, or property
• With Consent: When you have given explicit consent to share your information

We do not sell your personal information to third parties. We do not access the contents of your GPU instances or volumes except as required for Platform operation or when required by law.

5. Data Security

We use strong security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest
• Isolation: GPU instances are containerized and isolated from other users
• Access Controls: Token-based authentication and role-based access controls
• Infrastructure: Secure cloud infrastructure with monitoring and intrusion detection

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Support legitimate business purposes

When you delete a volume or instance, the associated data is permanently removed from our infrastructure. Account data is retained until you request account deletion. When data is no longer needed, we securely delete or anonymize it.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 General Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain processing of your personal data
• Restriction: Request restriction of processing in certain circumstances

7.2 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

7.3 European Residents (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right to access, rectify, or erase your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at privacy@trycassian.com.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Enable core functionality like authentication and security
• Analytics Cookies: Understand how users interact with our Platform
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect Platform functionality.

9. Third-Party Services

Our Platform integrates with third-party services that have their own privacy policies. We encourage you to review the privacy policies of these third-party services.

10. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with service providers
• Compliance with applicable data transfer frameworks

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our Platform
• Updating the "Last updated" date
• Sending email notification for significant changes

Your continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

For data subject requests, please email privacy@trycassian.com with the subject line "Data Subject Request" and include sufficient information to verify your identity.