Privacy Policy

This Privacy Policy explains how Siarix handles information when you visit siarix.tech, create an account, use the Cognitive Control Plane, run a public benchmark, submit an enterprise pilot application, or otherwise interact with the Services.

1. Information we collect

Depending on how you use Siarix, we may collect account and identity information, workspace membership, company and role information, contact details, pilot application responses, billing and transaction references, model/provider configuration, audit and execution records, evidence and cognitive-state objects, technical telemetry, security events, and support communications.

2. Information you provide through enterprise applications

Enterprise pilot applications may include company name, applicant name, work email, role, provider/model stack, desired timing, intended workflow, and optional notes. We use this information to evaluate fit, contact the applicant, scope a pilot, perform security and commercial review, and, if approved, establish billing and onboarding.

3. How we use information

We use information to provide, secure, maintain, troubleshoot, and improve the Services; authenticate users; enforce policies; route and govern executions; preserve authorized organizational state; prevent abuse; process billing; respond to requests; communicate about enterprise applications; and comply with legal obligations.

4. Service providers and infrastructure

Siarix uses infrastructure and service providers to operate the platform. Current production architecture may include Microsoft Azure for application hosting, Supabase for persistence and authentication, Stripe for billing and payment processing, Appwrite for selected public application workflows, and model/infrastructure providers selected by customers under BYOK. Each provider processes information according to its role and applicable terms.

5. BYOK credentials

When supported, provider credentials are used to connect customer-selected services. Customers are responsible for ensuring they are authorized to use those credentials and for rotating or revoking them when necessary. Siarix is designed to protect configured credentials and apply policy boundaries, but customers should still follow least-privilege and provider-specific security practices.

6. Payment information

Payment details are processed by Stripe. Siarix may receive payment status, customer, invoice, price, subscription, and transaction identifiers needed to administer access and billing, but card data entered into Stripe-hosted payment surfaces is handled by Stripe.

7. Public benchmark data

The public production proof creates benchmark-specific workspace objects, execution records, evidence identifiers, ledger events, and proof artifacts. These runs use deterministic benchmark resources and are not intended for submission of customer secrets or confidential production data.

8. Retention

We retain information for as long as reasonably necessary to operate the Services, meet contractual and legal obligations, maintain security and auditability, resolve disputes, prevent fraud, and preserve authorized organizational history. Retention may vary by data type, workspace policy, agreement, and legal requirement.

9. Security

Siarix uses technical and organizational controls intended to protect information, including access control, governed execution, audit logging, credential protection, and infrastructure security. No online system can guarantee absolute security.

10. Your choices and rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, portability, or information about processing. Some records may need to be retained for security, audit, contractual, or legal reasons. Requests can be submitted through the Siarix Contact page.

11. Enterprise customers

For enterprise deployments, a negotiated agreement, data processing addendum, security addendum, or other written terms may supplement or supersede portions of this Policy for the covered relationship.

12. Children

The Services are designed for business, professional, and organizational use and are not directed to children.

13. Changes

We may update this Policy as the platform, infrastructure, or legal requirements evolve. The effective date above identifies the current version.

14. Contact

Use the Siarix Contact page for privacy, data-protection, security, billing, or legal requests.