TO
Transfer OracleSign in
← Back to Transfer Oracle

Privacy Policy

Effective: 2026-04-17 | Transfer Oracle

1. Data Controller

Droidtech 42 AI Labs AB, operating as Transfer Oracle, organisation number 559534-0745, is the data controller for personal data processed through the Transfer Oracle service.

Contact: support@transferoracle.ai

2. What Data We Collect

Account data: Email address, name, company name (provided during registration).

Billing data: Processed by Stripe. We do not store credit card numbers.

API usage data: Call counts, timestamps, credit consumption per API key.

Feature vectors: Numerical arrays submitted for auditing. These are NOT personal data — they are model embeddings. They are processed in memory and not stored after the audit completes, unless you use session-based endpoints.

3. What We Do NOT Collect

  • Model weights or architecture details
  • Training data or datasets
  • Personally identifiable information from your users' data
  • Cookies for tracking (we use no third-party trackers)

4. How We Use Your Data

  • Provide the API service (audit, metrics, monitoring)
  • Send you API key provisioning and account emails
  • Track API usage for billing and rate limiting
  • Improve the service (aggregated, anonymised usage statistics only)

5. Data Location

All data is processed and stored in EU (Hetzner, Germany). We do not transfer personal data outside the EU/EEA except where necessary for payment processing (Stripe, US) and email delivery (Resend, US), both under Standard Contractual Clauses.

6. Data Retention

Account data: retained while your account is active + 12 months after deletion.

API usage logs: retained for 90 days.

Feature vectors: not retained after audit completion (session-based data expires after 1 hour).

Billing records: retained as required by Swedish tax law (7 years).

7. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing
  • Data portability
  • Object to processing
  • Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

To exercise these rights, contact support@transferoracle.ai.

8. Sub-Processors

  • Hetzner Online GmbH (Germany) — server hosting
  • Stripe Inc. (US) — payment processing
  • Resend Inc. (US) — transactional email

9. Changes

We may update this policy. Material changes will be communicated via email to the address on your account.