Compute · Legal

Privacy Policy

Last updated: November 4, 2026

Draft. Items marked TODO must be completed and the whole policy reviewed before Neotics Compute launches.

1. Who we are

This policy explains how Neotics Compute (the "Service") handles personal data. The Service is operated by TODO: legal name of the operating entity, TODO: registered address ("we", "us"), which is responsible for your personal data.

Privacy questions and requests can be sent to [email protected]. TODO: confirm this is the privacy contact, or name a separate one

2. What we collect

• Account. If you sign in with Google: your email address and your Google account identifier. If you sign in with a wallet: your public wallet address. We never ask for or store a password, and wallet sign-in never needs your private key.
• Credits and payments. Your credit balance and billing records, and for each USDC top-up: the quote, deposit address, amount, network and transaction hash. Transactions on Base are public by nature.
• Compute. The instances you rent (GPU model, image, region, provider, start and stop times, hourly price, connection details), the SSH public keys you provide, and your API keys, of which we store only a hash and a short prefix.
• Technical data. Our servers and hosting providers keep request logs (IP address, time and the page or API path requested) to run and secure the Service.
• Your browser. The console keeps your session token in your browser's local storage. We set no cookies of our own and use no analytics or advertising trackers.

3. How we use it

We use this data to sign you in, run and bill the instances you rent, credit your payments, answer support requests, prevent fraud and abuse, and meet legal obligations. TODO: state the legal basis for each use where required (for example contract, legitimate interests, legal obligation)

4. Who we share it with

We do not sell your personal data. We share it only as far as needed to provide the Service:

• GPU providers. When you rent an instance from a partner provider such as Sesterce, the instance configuration and your SSH public key are sent to that provider so it can create the machine.
• Google. When you use Google sign-in. The pages also load the sign-in button and fonts from Google, which receives your IP address. Google's own privacy policy applies to that.
• Blockchain services. We read the Base network through an RPC provider to confirm your deposits.
• Hosting and database providers that run the Service for us: TODO: list the hosting and database providers and where they store data
• Authorities, where the law requires it.

5. How long we keep it

We keep account, billing and payment records while your account exists and afterwards for as long as accounting and legal obligations require. TODO: set retention periods for account data, billing records and request logs

6. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict some uses, and to complain to a data protection authority. To use these rights, write to the contact address above. Transactions already recorded on a public blockchain cannot be changed or deleted by us.

7. Security

We store API keys only as hashes, we never handle wallet private keys or account passwords, and access to the Service's systems is limited to the people who run it. No system is perfectly secure; tell us at once if you think your account has been compromised.

8. Children

The Service is not meant for children. TODO: set the minimum age to use the Service

9. International transfers and governing law

TODO: where personal data is transferred and the safeguards used

This policy is governed by TODO: governing law and jurisdiction.

10. Changes to this policy

When we change this policy we will update the "Last updated" date above, and for material changes we will take reasonable steps to tell you, for example with a notice in the console.