Privacy Policy

Conflara, Inc. ("Conflara", "we", "us") is a Delaware corporation that operates conflara.ai, an independent testing, certification and grading platform and marketplace for AI models, agents, robots, datasets and APIs. We are the data controller for the personal data described in this policy. You can reach us at [email protected].

• Account data. Name, email address, password hash, role (buyer, seller or administrator) and, for sellers, company name, website, contact details and business registration information you provide during onboarding. Authentication is handled by our identity service (Keycloak) hosted by us.
• Platform activity. Assets you submit or list, certification requests and results, orders, reviews, wishlists, wallet transactions and messages you send through the platform.
• Technical data. IP address, browser and device information, pages visited, timestamps and error logs, collected through server logs and our infrastructure provider (Cloudflare).
• Correspondence. Emails and support requests you send to any @conflara.ai address.

We do not knowingly collect data from children under 16, and the platform is intended for business use.

• To create and secure your account and provide the platform (performance of a contract).
• To run certification tests on assets you submit and publish the resulting grades (performance of a contract).
• To process orders, payouts and wallet transactions (performance of a contract and legal obligations).
• To respond to enquiries, including partnership and investor enquiries (legitimate interest).
• To keep the platform secure, prevent abuse and debug errors (legitimate interest).
• To send product updates about Conflara, which you can opt out of at any time (consent or legitimate interest).

We do not sell personal data. We share it only with:

• Service providers that host and run the platform for us: Hetzner Online GmbH (servers, Germany and Finland), Cloudflare, Inc. (DNS, TLS and DDoS protection) and Google LLC (Google Workspace for email). Each acts under a data processing agreement.
• Marketplace counterparties. When you buy or sell an asset, the other party receives the information needed to complete the transaction, such as your company name and order details.
• Authorities where required by law, or to protect the rights, safety and property of Conflara, our users or others.

Certification grades and public seller storefront information are published on the platform by design. Personal data is not included in published certification records.

Our servers are in the European Union. Our email and some support tooling are provided by Google LLC in the United States. Where personal data leaves the European Economic Area or the United Kingdom, we rely on standard contractual clauses or an equivalent lawful transfer mechanism.

• Account data: for as long as your account exists, then up to 90 days after deletion.
• Order and financial records: 7 years, as required by tax and accounting law.
• Certification records: for the life of the certificate plus 3 years, for audit purposes.
• Server and security logs: up to 12 months.
• Correspondence: up to 24 months after the last message.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw consent. Under the EU and UK GDPR you also have the right to complain to a supervisory authority. To exercise any right, email [email protected]. We respond within 30 days.

We use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We do not use advertising cookies. If we introduce analytics cookies we will ask for your consent first and update this policy.

All traffic is encrypted in transit with TLS. Databases and internal services are not reachable from the public internet. Access to production systems is limited to the founders. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you and any relevant regulator as the law requires.

We will update this policy as the platform moves from preview to general availability. Material changes will be announced on this page and, for account holders, by email. Continued use after the effective date means you accept the updated policy.

See also our Terms of Service.