Privacy Policy

InferGrove, Inc. ("InferGrove," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, company name, and billing information. If you sign up using a third-party service (GitHub, Google), we receive your profile information from that service.

1.2 Usage Data

We automatically collect information about how you use our services, including:

• API request metadata (timestamps, model used, token counts, latency)
• Dashboard interactions and feature usage
• Device information (browser type, operating system, IP address)
• Performance metrics and error logs

1.3 API Content

We do not store, log, or use the content of your API requests (prompts and responses) for any purpose other than delivering the service. Input and output content is processed in memory and discarded immediately after the response is delivered. We do not use your content to train or improve our models.

1.4 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number. We retain only the last four digits and expiration date for display purposes.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send billing notifications
• Send technical notices, security alerts, and support messages
• Monitor and analyze usage patterns to improve performance
• Detect, prevent, and address fraud and abuse
• Comply with legal obligations

3. Data Retention

We retain account information for as long as your account is active. Usage metadata is retained for 90 days for analytics and billing purposes. API content (prompts and responses) is never retained — it is processed in real-time and immediately discarded.

When you delete your account, we remove your personal information within 30 days, except where retention is required by law.

4. Data Sharing

We do not sell your personal information. We may share information with:

• Service providers: Companies that help us operate our platform (cloud infrastructure, payment processing, analytics)
• Legal requirements: When required by law, subpoena, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorize sharing

5. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• SOC 2 Type II certified infrastructure
• Regular penetration testing and security audits
• Role-based access controls and audit logging
• Zero-trust network architecture

6. International Data Transfers

InferGrove operates globally. Your data may be processed in the United States and other countries where we maintain infrastructure. For EU customers, we offer EU data residency options and comply with GDPR requirements including Standard Contractual Clauses for international transfers.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete your personal information
• Object to or restrict processing of your information
• Data portability (receive your data in a structured format)
• Withdraw consent at any time

To exercise these rights, contact us at privacy@infergrove.com.

8. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (with your consent) to understand how our website is used. You can control cookie preferences through your browser settings.

9. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our website at least 30 days before the changes take effect.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

InferGrove, Inc.
Privacy Team
548 Market Street, Suite 400
San Francisco, CA 94104
privacy@infergrove.com

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your CCPA rights

We do not sell personal information. To exercise your rights, contact privacy@infergrove.com or use the privacy controls in your account settings.

13. Data Processing Agreement

For Enterprise customers, we offer a Data Processing Agreement (DPA) that provides additional contractual protections for personal data processing. Our DPA includes Standard Contractual Clauses (SCCs) for international data transfers and is available upon request.

14. Sub-processors

We use the following categories of sub-processors to deliver our services:

• Cloud Infrastructure: AWS, GCP (compute and storage)
• Payment Processing: Stripe (billing and payments)
• Analytics: PostHog (product analytics, self-hosted)
• Communication: SendGrid (transactional email)
• Support: Intercom (customer support)

We maintain an up-to-date list of sub-processors and notify Enterprise customers 30 days before adding new sub-processors.

15. Automated Decision-Making

We use automated systems for fraud detection and abuse prevention. These systems may automatically block or throttle API access if suspicious activity is detected. You can appeal automated decisions by contacting support@infergrove.com.