Privacy Policy

01Who we are

Scale AI Markets, Inc. operates the GPUaaR platform and is the controller of the personal data described here. You can reach us at privacy@gpuaar.com.

02What we collect

We collect only what we need to run the service and to bill for it.

• Account data: your name, email address, and company, taken from what you enter at sign-up or from your identity provider if you use single sign-on.
• Authentication data: a password stored only as a salted hash, never in a form we can read, plus sign-in times.
• Usage data: the workloads you run, the capacity they consume, and the resulting charges.
• Operational logs: records of actions taken on your account, which is what makes an audit trail possible.
• Support and enquiry data: anything you send us through the contact form or by email.

03Your workload content

The content and data you bring to the platform is yours. We process it only to run the workloads you ask us to run.

We do not use it to train models, we do not sell it, and we do not share it with anyone except where you direct us to or the law requires it.

04Why we process it

Each category has a purpose and a lawful basis:

• To provide the service you asked for — performance of our contract with you.
• To bill accurately and collect payment — performance of our contract.
• To keep the platform and your account secure, including detecting abuse — our legitimate interest in a secure service, and yours.
• To meet legal, tax, and audit obligations — compliance with a legal obligation.
• To reply when you contact us — our legitimate interest in answering you.

05Where your data lives

You can name the jurisdictions a workload and its data may occupy, and the platform enforces that choice rather than treating it as guidance.

Where we transfer personal data across borders, we do so under an appropriate safeguard recognised by the relevant law.

06Who we share it with

We do not sell personal data. We share it only with service providers who help us run the platform — infrastructure, payment processing, and communications — each bound to process it only on our instructions.

We may disclose data where the law requires it, but we will tell you unless we are legally prevented from doing so.

07How long we keep it

Account data is kept while your account is open and for a reasonable period afterwards so you can export it or reopen the account.

Billing records are kept for as long as tax and accounting law requires. Operational logs are kept for the retention period configured on your account. Everything else is deleted once its purpose is served.

08Your rights

Depending on where you live you may have some or all of the following rights. We will not charge you for exercising them, and we will not treat you differently for doing so.

• Access a copy of the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your data, where we have no overriding obligation to keep it.
• Export your data in a portable form.
• Object to, or ask us to restrict, processing based on our legitimate interests.
• Complain to your data protection authority if you think we have got this wrong.

09Cookies

We set a cookie to keep you signed in, and short-lived cookies during a single sign-on exchange to verify that the sign-in that comes back is the one that went out.

These are necessary for the service to function. We do not use advertising or cross-site tracking cookies.

10Security

Passwords are stored only as salted hashes. Sessions are cryptographically signed. Workloads are isolated by default, and every action on an account is recorded and attributable.

Our Security page describes this in more detail.

11Changes to this policy

If we change how we handle personal data in a way that materially affects you, we will tell you before the change takes effect.