Privacy Policy

1. Information We Collect

Information you provide

• Account & organization — your name, email address, and organization details, provided directly or through a sign-in provider such as Google.
• Billing — payment details are collected and processed by our payment provider (Stripe); we do not store full card numbers.
• Your Content — the code, files, container images, environment variables, and other data you upload to or run in your sandboxes, templates, volumes, and shares.
• Support — information you send us when you contact support.

Information collected automatically

• Usage & API logs — requests to the Service, including timestamps, endpoints, sandbox and resource identifiers, and outcomes.
• Device & connection — IP address, browser/agent, and similar technical data.
• Audit events — security-relevant actions (for example, key creation, sign-ins, and administrative changes) recorded to operate and secure the Service.
• Analytics — aggregate, privacy-preserving website analytics.

2. How We Use Information

• to provide, operate, and maintain the Service — creating and running your sandboxes and related resources;
• to meter usage, bill you, and prevent fraud;
• to secure the Service, detect and prevent abuse, and enforce our Terms;
• to provide support and communicate with you about the Service; and
• to understand usage and improve reliability, performance, and features.

3. Your Sandbox Data

To run the Service, we store the data that makes up your sandboxes — including root filesystems, snapshots, volumes, and shared files — on infrastructure we operate. We treat this data as confidential. We access the contents of your sandboxes and stored data only as needed to operate, secure, or support the Service, to prevent or investigate abuse, or where required by law. We do not use the contents of your sandboxes to train models, and we do not sell your data.

4. How We Share Information

We do not sell personal information. We share information only:

• with service providers that help us run the Service (for example, cloud and datacenter infrastructure, our payment provider, and email/communication providers), under confidentiality obligations and only as needed;
• for legal and safety reasons — to comply with law or valid legal process, enforce our Terms, or protect the rights, safety, and security of Kortix, our users, or the public; and
• in a business transfer — as part of a merger, acquisition, financing, or sale of assets, subject to this Policy.

5. Data Retention

We retain account information for as long as your account is active and as needed to provide the Service and meet legal obligations. Sandboxes and their data follow the lifecycle you configure — for example, idle sandboxes may auto-stop, and stopped sandboxes may be archived and later deleted per your retention settings. When you delete a resource or close your account, we delete or de-identify the associated data within a reasonable period, except where retention is required by law.

6. Security

Security is central to how Platinum is built. Each sandbox runs in its own hardware-isolated virtual machine (KVM), not a shared container runtime. Sensitive credentials are encrypted at rest (AES-256-GCM), control-plane–to-host communication uses mutual TLS with an allowlist, and access is scoped per organization. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; if a breach affecting your information occurs, we will notify you as required by law.

7. Your Rights & Choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can manage much of your data in the dashboard, or contact us at legal@kortix.com to exercise these rights. We will not discriminate against you for exercising them.

8. International Transfers

We operate infrastructure in one or more regions and may process and store information in countries other than your own. Where required, we use appropriate safeguards for such transfers. You may choose the region in which your sandboxes run where that option is available.

9. Cookies

We use a small number of cookies and similar technologies — primarily a session cookie to keep you signed in to the dashboard, and privacy-preserving analytics to understand aggregate site usage. We do not use advertising cookies.

10. Children

The Service is not directed to, and may not be used by, anyone under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will update the “Effective” date above and, where appropriate, provide additional notice.

12. Contact

Kortix AI Corp, 701 Tillery Street, Unit 12-2521, Austin, Texas 78702, United States. Privacy inquiries: legal@kortix.com · General: info@kortix.com.