Privacy Policy

1. Overview

This Privacy Policy explains how Eminent Cloud ("we", "us", "our"), operated from Bangalore, Karnataka, India, collects, uses, discloses and safeguards information when you use our website, desktop application and cloud services (collectively, the "Service"). We are committed to compliance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and applicable rules, and—where relevant—the EU/UK GDPR.

By using the Service you acknowledge you have read and understood this Policy. If you do not agree, please do not use the Service.

2. Our local-first data guarantee

The foundational promise of Eminent Cloud is that your training files never leave your device. When you train a model:

• Your photos, spreadsheets, and documents remain on your local hard drive at all times.
• Our desktop software extracts only mathematical signals (embeddings/vectors) needed for training.
• Only these compressed, non-reversible numerical signals are transmitted to our cloud GPUs.
• We cannot view, access, store, or reconstruct your original files from these signals.

Because of this architecture, your raw training data is never "personal data" in our possession.

3. Information we collect

a) Account information

Name, email address, and billing details when you register or subscribe.

b) Usage data

Telemetry such as GPU compute time, feature usage, device/OS type, and approximate region, for billing, security and product improvement.

c) Communications

Information you provide when you contact support, fill a form, or join the early-access list.

d) Technical data

IP address, browser type, and similar log data collected automatically for security and fraud prevention.

4. How we use your information

• To provide, operate, maintain and improve the Service.
• To process payments and manage subscriptions.
• To provide customer support and respond to enquiries.
• To allocate and manage cloud GPU resources.
• To send service, security and (with consent) marketing communications.
• To detect, prevent and address fraud, abuse and security incidents.
• To comply with legal obligations.

5. Legal bases for processing

We process personal data on the bases of: your consent (which you may withdraw at any time); performance of our contract with you; our legitimate interests in operating and securing the Service; and compliance with legal obligations.

6. Sharing and third-party processors

We do not sell your personal information. We share limited data only with trusted processors strictly to operate the Service, including: payment processors (e.g. UPI/card gateways), cloud infrastructure and GPU providers, email and analytics providers. All processors are bound by confidentiality and data-protection obligations and may only process data on our instructions. We may also disclose information where required by law, court order, or to protect rights, safety and property.

7. Data retention

We retain account and billing data for as long as your account is active and thereafter as required for legal, tax and accounting purposes. Usage logs are retained for a limited period for security. You may request deletion as described below; note that training files reside locally on your device and are solely under your control.

8. Security

We implement reasonable technical and organisational measures including encryption in transit (TLS) and at rest, access controls, and least-privilege practices. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but we work continuously to protect your data and will notify you and the relevant authority of a reportable breach as required by law.

9. Your rights

Subject to applicable law (including the DPDP Act and, where relevant, GDPR), you have the right to: access your personal data; correct or update it; request erasure; withdraw consent; restrict or object to certain processing; data portability; and to nominate another person to exercise your rights in case of death or incapacity (DPDP Act). To exercise any right, email supreet@eminentcloud.in. We will respond within the timeframes required by law.

10. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from children. Where processing of a child's data is required, we will seek verifiable parental consent as mandated by the DPDP Act.

11. International transfers

Your data is primarily processed in India. Where data is transferred to or accessed from other countries, we use appropriate safeguards consistent with applicable law.

12. Cookies and local storage

Our website uses essential cookies and browser local storage to remember preferences, keep you signed in, and run interactive features such as the demo studio. You can control cookies via your browser settings; disabling some may affect functionality.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified via email or an in-app/website notice. The "Last updated" date above reflects the latest revision.

14. Grievance officer

In accordance with the IT Act and the DPDP Act, you may contact our Grievance Officer for any privacy concern or complaint: Eminent Cloud, Bangalore, Karnataka, India — supreet@eminentcloud.in. We will acknowledge and resolve complaints within the statutory timeframe.

Questions about this document? Email supreet@eminentcloud.in.