Privacy Policy - SecretAI

1. Introduction

Gamma Research and Development is committed to safeguarding the privacy of users of SecretAI and ensuring compliance with applicable privacy and data protection laws, including the Israeli Protection of Privacy Law, 5741-1981, and any other relevant regulations. This Policy explains how we collect, use, and protect your personal information.

"Personal Information" means any information that can be used—alone or in combination—to personally identify an individual, such as a name, email address, billing details, or other contact information.

2. Scope and Consent

By accessing or using the Website and the services provided via SecretAI (including the SecretAI SDK and SecretVMs), you consent to the terms of this Privacy Policy and our collection, processing, and disclosure of your Personal Information for the purposes described herein. If you do not agree with this Policy, you must not access or use the Website.

We may update this Privacy Policy periodically. Continued use of the Website after changes become effective constitutes acceptance of the revised Policy. Updates will be posted on this page at least ten (10) days before taking effect.

3. Information We Collect

We may collect the following categories of Personal Information:

• Account Information: Name, email address, organizational details, and credentials.
• Service Usage Data: SDK usage logs, SecretVM deployment logs, session data, and interaction metadata.
• Device Data: Browser type, IP address, time zone, and operating system.
• Payment Data: Payment information is collected and processed by our third-party providers. We do not store full payment details.

4. How We Use Personal Information

Your Personal Information may be used for the following purposes:

• Operating and maintaining the Website and services
• Provisioning and billing of SDK and SecretVM usage
• Managing accounts and providing support
• Monitoring service integrity and performance
• Complying with legal and regulatory obligations

5. Sharing of Personal Information

We may share Personal Information with:

• Service Providers: Including hosting partners, payment processors, and cloud infrastructure providers under confidentiality obligations.
• Legal Authorities: Where disclosure is required to comply with applicable law or enforce our legal rights.
• Business Transfers: In the event of a merger, acquisition, or reorganization, your information may be transferred.

We do not sell, lease, or rent your Personal Information.

6. Data Security

We use appropriate technical and organizational measures to protect your data. Workloads processed via SecretVMs are executed inside Intel TDX-based Trusted Execution Environments (TEEs) that ensure confidentiality and integrity at the hardware level.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, modify, or delete your Personal Information
• Restrict or object to certain processing
• Request data portability

Requests may be submitted by contacting us at [email protected].

8. Data Retention

Personal Information will be retained as long as necessary to fulfill the purposes outlined in this Policy unless a longer retention period is required by law. Data is securely deleted when no longer needed.

9. Contact Us

For questions about this Privacy Policy or our data practices, contact us at:

Email: [email protected]