Privacy Policy

Last updated: November 4, 2026

1. Introduction

Cloptima Technologies, Bangalore, India ("Cloptima", "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI gateway, governance, and guardrails platform (the "Service"), including its cloud cost features.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and role. We may also collect billing information if you subscribe to a paid plan.

AI Gateway Data

When your applications send model calls through the gateway, we record request metadata such as model, token counts, cost, latency, policy and guardrail outcomes, and the attribution fields you send. Prompt and response content is not stored by default. You can opt in to retain it for audit, and you control that retention in your policies.

Cloud Cost Data

With your explicit authorization, we collect cloud cost data, resource metadata, and usage metrics from your connected cloud accounts (AWS, GCP, Azure). We use read-only access and never collect application data, database contents, or secrets.

Usage Data

We collect information about how you interact with our platform, including pages visited, features used, and actions taken. This helps us improve our product.

3. How We Use Your Information

  • Provide and operate the Service, including enforcing your policies, guardrails, and budgets on each model call
  • Generate spend reports, recommendations, and alerts
  • Improve the reliability, performance, and quality of the Service, using aggregated operational signals
  • Communicate with you about your account and our services
  • Comply with legal obligations

We do not use your prompts, responses, or customer data to train AI models.

4. Data Sharing

We do not sell your personal information or cloud cost data. We may share data with:

  • Service providers who assist in operating our platform (under strict data processing agreements)
  • Law enforcement when required by law
  • In connection with a merger, acquisition, or sale of assets (with prior notice)

5. Data Security

We use industry-standard security measures including AES-256 encryption at rest, TLS 1.3 encryption in transit, and regular security audits. Our security controls and processes are SOC 2-aligned. See our Security page for details.

6. Data Retention

We retain your data for as long as your account is active. Upon account closure, we delete all your data within 30 days, except where required by law.

7. Your Rights

You have the right to access, correct, delete, or export your data. You may also withdraw consent for data processing at any time. Contact us at [email protected] to exercise these rights.

8. Data Protection Officer

Cloptima has appointed a Data Protection Officer who oversees how we handle personal data. You can reach our Data Protection Officer at [email protected].

9. Cookies

We use essential cookies for authentication and session management. We use analytics cookies only with your consent to understand product usage.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or in-app notification.

11. Contact Us

For privacy-related questions, contact us at [email protected].