Blackfuel.ai Service Privacy Policy

This policy describes how Blackfuel.ai ("we," "us," or "our") handles data submitted by our corporate customers ("Customer" or "you") when using our inference-as-a-service (the "Service").

We are committed to the privacy and confidentiality of your data. Sections 1 to 5 apply only to the data you provide to us for processing via the Service; they are not intended for website visitors or marketing activities. Section 6 covers the one other case in which we hold personal data about you: an enquiry you send us through our website.

1. Scope of this Policy

This policy covers two categories of data:

• Corporate Data: Any data, files, text, or other information that you (or your end-users) submit to our Service for processing. This is your data; we are a processor acting on your behalf.
• Service Data: Technical and operational information generated from your use of the Service (e.g., API logs, request volume, error logs) which we use to maintain and improve the Service.

2. Our Handling of Your Corporate Data

Our commitment to you regarding your Corporate Data is simple:

• Confidentiality: Your Corporate Data is treated as strictly confidential.
• Purpose Limitation: We will only use your Corporate Data to provide and maintain the Service as requested by you (i.e., to run the inference process and return the result).
• No Training: We do not use your Corporate Data to train our AI models or any other models, for any reason.
• No Sale or Sharing: We do not sell, rent, or share your Corporate Data with any third parties, except as required by law or as necessary to provide the Service (e.g., to a cloud infrastructure provider acting as our sub-processor, who is also bound by confidentiality).

3. Data Processing for Inference-as-a-Service

This section details how your data is handled during the inference process.

• Data in Transit: All Corporate Data sent to and from our Service is encrypted using industry-standard protocols (e.g., TLS/SSL).
• Data During Processing: Data is processed in secure, isolated environments. It is loaded into memory only for the duration required to perform the inference calculation.
• Data Retention (Inputs & Outputs):
  • Inputs: We do not store your input Corporate Data after the inference request has been successfully processed and the response is returned to you.
  • Outputs: We do not store the output (the result of the inference) generated by the Service, except as required to transmit it back to you.
  • Logging (optional): We may retain minimal, anonymized, or non-sensitive portions of request/response metadata (such as timestamps or error codes) for billing, monitoring, and debugging purposes for a limited period. We will not log the content of your inputs or outputs.

4. Security

We implement appropriate technical and organizational security measures to protect your Corporate Data against unauthorized access, alteration, disclosure, or destruction. This includes, but is not limited to, access controls, encryption, and secure network architecture.

5. Data Processor Role

You are the "Data Controller" of your Corporate Data. Blackfuel.ai is the "Data Processor." We will only process data on your behalf and in accordance with your instructions, which include this policy and our service agreement.

6. Enquiries You Send Through Our Website

This section is the exception to the scope set out above. It covers the personal data you give us when you write to us through the contact form on blackfuel.ai, rather than data you submit to the Service. For these enquiries Blackfuel SAS is the Data Controller, not a processor.

• What we collect: your area of interest, your name and your email address, and, if you choose to give them, your company and a message.
• Why we collect it: to read your enquiry and reply to it. We rely on our legitimate interest in answering the enquiries people send us, under Article 6(1)(f) of the GDPR, and, where your enquiry concerns a possible contract, on Article 6(1)(b). Writing to us is entirely voluntary, and you can email comms@blackfuel.ai directly instead.
• Who else is involved: HubSpot Ireland Limited acts as our processor for the contact form and stores enquiries in HubSpot's European hosting region. Its parent company, HubSpot, Inc. in the United States, may access that data to support the service, under standard contractual clauses. If your enquiry cannot reach HubSpot, the form instead prepares a message in your own email application, which only you can send.
• No tracking: the form sets no cookies. We do not load HubSpot's tracking script on our website and we send HubSpot no browser identifier, so your enquiry is not linked to your browsing of the site and writing to us does not cause you to be followed across other websites.
• How long we keep it: up to three years from our last contact with you, after which we delete it. You can ask us to delete it sooner at any time.
• Your rights: you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. To exercise any of these rights, write to comms@blackfuel.ai. You also have the right to lodge a complaint with the French data protection authority, the CNIL (cnil.fr ↗), or with the supervisory authority where you live.

What our website itself stores in your browser, including the consent-gated analytics cookies, is described separately in the Website Cookie Notice.

7. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you, either through our service agreement or by other direct communication.

8. Contact Us

If you have any questions about this Service Privacy Policy, please contact us at: comms@blackfuel.ai