Privacy Policy

We collect necessary data categories to provision high-reliability enterprise computational services, secure access channels, and execute commercial contracts:

• Account Registration Data: Full legal names, verified enterprise email addresses, corporate titles, primary telephone numbers, and authorized account security credentials.
• Organization & Contractual Profiling: Company name, tax identifiers, registered domain addresses, enterprise billing addresses, and designated administrative contacts.
• Financial & Transactional Records: Payment gateway tokens, invoicing history, metered API compute tier quotas, and corporate procurement paperwork.
• Support & Feedback Records: Records of technical support queries, engineering communications, bug submissions, and compliance correspondence.

When developers and enterprise users interact with our neural modules, they transmit inputs such as structured queries, prompts, document corpus files, contextual vector embeddings, and execution parameters ("Customer Input Data"). You retain total ownership and intellectual domain over all submitted materials.

To ensure platform stability, defend against distributed denial-of-service threats, and optimize computing resource allocation across global clusters, our edge gateways automatically gather non-content operational telemetry:

• Network & Routing Metadata: IP addresses, TLS handshake ciphers, Autonomous System Numbers (ASN), and origin routing zones.
• API Telemetry & Diagnostics: HTTP status codes, request timestamp precision, inference latency percentiles (P95/P99), compute token consumption counts, and GPU memory utilization indices.
• Platform Interaction Signatures: Browser agent classification, dashboard console access logs, authentication timestamps, and session security tokens.

RAKYN strictly applies the principle of purposeful data limitation. Data collected is used exclusively for targeted operational and compliance objectives:

• Provisioning Core Services: Authenticating client credentials, routing inference payloads, and generating model responses.
• Enterprise Billing & Metering: Calculating accurate computational token billing and invoicing per customer order forms.
• Security & Threat Mitigation: Monitoring infrastructure against prompt injection attacks, unauthorized penetration, and multi-tenant isolation breaches.
• Contractual & SLA Compliance: Validating uptime metrics and verifying high-availability commitments specified in enterprise Service Level Agreements.

We maintain a categorical division between public foundation model weights and our enterprise customer environments:

No Foundation Training on Customer Data: RAKYN never employs customer prompts, model outputs, private corpora, or proprietary fine-tuning artifacts to train, refine, or evaluate public foundation neural models without explicit, opt-in written contractual approval.

In accordance with the European Union General Data Protection Regulation (GDPR) and the UK Data Protection Act, RAKYN processes personal and organizational telemetry on established lawful grounds:

• Contractual Performance (Art. 6(1)(b)): Executing terms established in Master Services Agreements, Order Forms, and enterprise licenses.
• Legitimate Enterprise Interests (Art. 6(1)(f)): Protecting our computing network against malicious intrusions, maintaining software integrity, and preventing fraud.
• Statutory Compliance (Art. 6(1)(c)): Preserving financial accounting and audit documentation pursuant to corporate tax laws and lawful governmental directives.

We do not sell personal data, enterprise datasets, or prompt telemetry. Data is disclosed only in strictly bounded circumstances:

• Vetted Infrastructure Partners: Cloud compute hosts and GPU data centers bound by data protection agreements conforming to SOC 2 Type II controls.
• Corporate Restructuring: In the event of a merger, acquisition, or restructuring, transferred data remains protected under the commitments of this Policy.
• Legal & Regulatory Mandates: Where compelled by valid subpoenas, court orders, or statutory mandates from competent law enforcement agencies.

RAKYN operates computing clusters in multiple geopolitical zones including North America, the European Economic Area (EEA), and the Asia-Pacific (APAC) region. When transferring data internationally:

We execute the European Commission Standard Contractual Clauses (SCCs) alongside supplementary technical encryption safeguards. Enterprise customers may additionally select designated regional data residency constraints guaranteeing prompts and inference never leave European or domestic borders.

We adhere to precise retention timelines calibrated against technical necessity and regulatory mandates:

• Inference Data: Purged from volatile compute memory immediately following payload return, retaining 0 days of customer content by default.
• Operational Telemetry: Retained for rolling 90-day periods for security analysis and anomaly mitigation, then permanently overwritten.
• Account Records: Kept for the duration of the active contractual relationship plus seven (7) years to fulfill accounting, tax, and audit obligations.
• Self-Serve Console Purge: Developers can trigger cryptographic destruction of private embeddings and model checkpoints via the RAKYN Cloud Console.

RAKYN enforces military-grade defense-in-depth across our computational infrastructure and corporate perimeter:

Depending on your geographical jurisdiction (including GDPR, UK GDPR, and the California Consumer Privacy Act - CCPA), you possess specific legal rights regarding your personal information:

• Right of Access & Portability: Request a comprehensive export of all personal data held concerning your identity in machine-readable JSON format.
• Right to Rectification: Demand prompt correction of incomplete or erroneous records.
• Right to Erasure ("Right to be Forgotten"): Request permanent removal of administrative contact records where ongoing statutory retention is not required.
• Right to Object or Restrict Processing: Opt-out of non-essential operational communications or object to legitimate-interest activities.

RAKYN enterprise services, APIs, and AI models are strictly intended for enterprise professionals, developers, and corporate organizations. Our platforms are not directed to individuals under eighteen (18) years of age. We do not knowingly collect personal information from minors. If you discover that a minor has submitted data to RAKYN, notify our privacy counsel immediately for expedited deletion.

RAKYN engages a selective roster of third-party infrastructure providers to support resilient computing and secure communications. Each subprocessor undergoes rigorous architectural vetting, compliance audits, and executes Data Processing Addenda (DPAs) imposing standards equivalent to our own commitments.

A live, current directory of authorized computational and storage subprocessors is accessible in our Trust & Compliance Center. Enterprise customers may subscribe to automated notifications regarding prospective subprocessor additions with thirty (30) days advance notice.

We periodically update this Privacy Policy to reflect advancing AI regulatory frameworks, new platform capabilities, or updated security benchmarks. When modifications are material, we will provide enterprise notice at least thirty (30) days prior to implementation via dashboard notices and email alerts to primary administrators.

The "Last Updated" notice at the head of this document permanently signifies the operational effective date of the current iteration.

For privacy verifications, exercising your statutory rights, or requesting an enterprise Data Processing Agreement (DPA):