Privacy Policy

Last updated: October 23, 2026

This Privacy Policy describes how SetCloud LLC ("SetCloud," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit setcloud.com or use our services ("Service"). We are committed to protecting your privacy and handling your data with transparency.

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, phone number, company name, and password when you register for an account.
• Billing information: Payment method details (credit/debit card) processed and stored by Stripe. We do not store full card numbers on our servers.
• Identity verification data: Government-issued ID, selfie images, and biometric data submitted through Stripe Identity for verification before premium or aftermarket domain purchases.
• Business information: Company name, website, phone number, industry, and physical address provided during onboarding.
• Communications: Messages, support tickets, emails, and chat transcripts when you contact us.
• Domain registration data: Registrant contact information required by ICANN for domain registration.

1.2 Information Collected Automatically

• Usage data: Pages visited, features used, API calls made, resource consumption, and service usage patterns.
• Device and browser information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
• Log data: Server logs including timestamps, request URLs, response codes, and referrer URLs.
• Cookies and similar technologies: Session cookies and authentication tokens. See Section 10 for details.

1.3 Information from Third Parties

• Payment processor: Transaction status, payment confirmations, and fraud risk scores from Stripe.
• GitHub: Repository metadata and profile information when you connect GitHub to deploy projects.
• Google services: Account information when you authenticate via Google OAuth.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, operate, and improve the Service.
• Process transactions, manage your credit balance, and send billing-related communications.
• Verify your identity and prevent fraud.
• Manage domain registrations and DNS services on your behalf.
• Provision and monitor cloud hosting, database, and secrets services.
• Process AI platform requests and chatbot responses.
• Send account notifications and two-factor authentication codes.
• Provide customer support and respond to your inquiries.
• Detect, prevent, and address technical issues and security threats.
• Comply with legal obligations, enforce our Terms, and protect our rights.
• Analyze usage patterns to improve features and user experience.

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract performance: Processing necessary to provide the Service you have requested, including account management, billing, and service delivery.
• Legitimate interest: Processing for our legitimate business interests, such as fraud prevention, security, and service improvement, where those interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as optional SMS two-factor authentication. You may withdraw consent at any time.
• Legal obligation: Processing required to comply with applicable laws, regulations, or legal proceedings.

4. Third-Party Service Providers

We share your information with third-party service providers who assist us in delivering the Service. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

We do not sell your personal information to third parties. We only share data with the providers listed above as necessary to deliver the Service.

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

• Account data: Retained for the duration of your account and deleted within a reasonable period after closure.
• Billing and transaction records: Retained for seven (7) years to comply with tax and financial reporting obligations.
• Server logs: Retained for 90 days for security monitoring and debugging purposes.
• Support communications: Retained for the duration of your account plus 12 months after closure.
• Identity verification data: Managed by Stripe per their retention policy. SetCloud does not store identity documents on its servers.
• Domain registration data: Retained as required by ICANN regulations and registrar agreements.

AI model data handling

Retention depends on the selected model. For Claude Fable 5 and Fable 5.1, AWS retains all inputs and outputs for up to 30 days for automated abuse detection. Flagged content may be reviewed by AWS personnel. Retained content is not shared with Anthropic. Cross-region requests retain content in the region that processes the request. We do not claim an enterprise zero-retention exemption for these models.

The model catalog, playground, agent model selector and API model metadata identify this handling before use. Enabling these models does not impose the same retention on every other model. See the model-specific abuse detection policy for the underlying service requirements.

6. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to data portability: Request your data in a structured, commonly used, machine-readable format.
• Right to restriction: Request that we restrict processing of your data under certain circumstances.
• Right to object: Object to processing based on legitimate interest or for direct marketing purposes.
• Right to withdraw consent: Withdraw previously given consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at legal@setcloud.com. We will respond within thirty (30) days. You also have the right to lodge a complaint with your local data protection authority.

7. Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to delete: Request deletion of your personal information, subject to certain exceptions permitted by law.
• Right to opt-out: We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" mechanism.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, contact us at legal@setcloud.com. We will verify your identity before processing your request.

8. International Data Transfers

SetCloud is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States and other countries as described in this Privacy Policy. Where required by applicable law, we rely on Standard Contractual Clauses or other approved transfer mechanisms to ensure adequate protection for transferred data.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, regular security assessments, and monitoring. However, no method of electronic transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security. For more details about our security practices, see our Security page.

10. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential cookies: Required for the Service to function, including authentication tokens and session management. These cannot be disabled.
• Functional cookies: Remember your preferences and settings to improve your experience.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal information, please contact us at legal@setcloud.com.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users without undue delay, as required by applicable law. Notification will include the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach. We will also notify the relevant data protection authorities where required.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date and, where required by law, by sending you a notification via email. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: support@setcloud.com
• Privacy and legal inquiries: legal@setcloud.com