Privacy Policy
DEGIMA AI, Inc. ("Company," "we," "us," or "our") operates the DEGIMA AI Computing Cloud platform ("Service"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service.
1. Information We Collect
Information You Provide
- Account Information. When you sign in with Google, we receive your name and email address from your Google account.
- SSH Public Keys. You may register SSH public keys to access your computing Pods.
- Personal Access Tokens. You may generate API tokens for CLI access. We store a cryptographic hash of each token, not the token itself.
Information Collected Automatically
- Usage Data. We collect information about your use of the Service, including Pod start/stop times, billing sessions, and credit transactions.
- Session Data. We use server-side sessions to maintain your authentication state. Session cookies are essential for the Service to function and are not used for tracking.
Information from Third Parties
- Google. We receive your name and email address when you authenticate via Google OAuth.
- Stripe. Our payment processor, Stripe, processes your payment information directly. We receive a Stripe customer ID associated with your account but do not receive or store your credit card number or other payment details. Stripe's handling of your information is governed by Stripe's Privacy Policy.
We do not intentionally collect “sensitive personal information” as defined under certain U.S. state privacy laws (such as government identifiers, precise geolocation, or health information) for the purpose of inferring characteristics about you.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Authenticate your identity and manage your account
- Process payments and manage your credit balance
- Communicate with you about the Service (e.g., service announcements, security alerts)
- Detect, prevent, and address abuse, fraud, and technical issues
- Comply with legal obligations
- Create aggregated or de-identified data that cannot reasonably be used to identify you, and use such data for analytics, security, and service improvement
3. How We Share Your Information
We do not sell your personal information. We share your information only in the following circumstances:
- Service Providers. We use third-party service providers to operate the Service—for example, hosting, database and authentication infrastructure, and payment processing (Stripe). These providers access your data only to perform services on our behalf.
- Affiliates. We may share personal information with our affiliates (for example, companies that control, are controlled by, or are under common control with DEGIMA AI, Inc.) where necessary for legal compliance, corporate administration, or a merger, acquisition, or similar transaction.
- Professional Advisors. We may share information with lawyers, accountants, auditors, or other professional advisors who are bound by confidentiality obligations, where necessary for the legitimate interests of the Company.
- Legal Requirements. We may disclose your information if required by law, regulation, legal process, or governmental request.
- Protection of Rights. We may disclose information to protect the rights, property, or safety of DEGIMA AI, Inc., our users, or the public.
- Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4. Data Security
We implement reasonable technical and organizational measures to protect your personal information, including encrypted connections (HTTPS), secure authentication via OAuth 2.0, and access controls on stored data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your account information and usage data for as long as your account is active or as needed to provide the Service. When you delete your account, we mark it as deleted and cease active use of your data. We may retain certain information as required by law or for legitimate business purposes (e.g., billing records).
6. Your Rights and Choices
- Access and Update. You can access and update your SSH public keys and account settings through the Service.
- Delete Your Account. You can delete your account through the Settings page. This will mark your account as deleted and stop all active Pods.
- Cookies. The Service uses only essential session cookies required for authentication. There are no analytics or advertising cookies.
7. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose about you
- Request correction of inaccurate personal information we maintain about you
- Request deletion of your personal information
- Not be discriminated against for exercising your privacy rights
We do not sell personal information as defined under the California Consumer Privacy Act (CCPA), including as amended by the California Privacy Rights Act (CPRA), and we do not share personal information for cross-context behavioral advertising.
How to submit a request. To exercise these rights, contact us at support@degima.ai. We will verify your request using information associated with your account. You may designate an authorized agent to submit a request on your behalf; we may require proof of your written permission and may still need to verify your identity directly.
Appeals. If we deny all or part of your request, you may appeal our decision by replying to our response or emailing support@degima.ai with “Privacy Request Appeal” in the subject line. We will explain our decision in writing and, if your appeal is denied, how you may contact the applicable regulator where permitted by law.
8. Other U.S. State Privacy Laws
Depending on where you live, other U.S. state privacy laws may grant you similar rights (such as access, deletion, or correction). To exercise any such rights, contact us at support@degima.ai. We will respond in accordance with applicable law.
9. Children's Privacy
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly.
10. International Users
The Service is operated from and intended for users in the United States. If you access the Service from outside the United States, you acknowledge that your information will be transferred to and processed in the United States.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on the Service with an updated effective date. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:
DEGIMA AI, Inc.
Email: support@degima.ai