Privacy Policy

COSMOS: COSMOS (the website that you are interacting with) does not store or collect any of your data.
The website is run through an AppScript wrapper that accesses your account. AppScript is a native program to Google. This means there are no additional privacy/security changes that we make.

Third-Party Servers: Third Party Servers used to deploy and run the website (Google, GoDaddy DNS, CloudFlare) may collect your data. These parties collect data regardless to COSMOS's service and are irrelevant with COSMOS. The data collected follows the privacy policy of the respective third parties.

As an enterprise-grade AI infrastructure firm, we adhere to strict data handling protocols regarding Large Language Models (LLMs):

• Public Model Isolation: We explicitly guarantee that any proprietary company data, documents, or customer information processed through our custom Retrieval-Augmented Generation (RAG) systems or middleware pipelines will never be used to train, fine-tune, or improve public LLMs (e.g., OpenAI, Anthropic, Google).

• Zero-Data Retention (ZDR): API endpoints and automated routing systems deployed by Stackgrid are configured for zero-data retention. Data passing through orchestration layers is held only in temporary memory to execute the automation and is immediately purged upon task completion.

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you to:

• Fulfill and manage purchases, orders, payments, and other transactions related to our deployment sprints.

• Create and manage your enterprise account and SLA billing.

• Deliver targeted administrative notices and infrastructure updates.

• Monitor system performance, API latency, and prompt drift (using anonymized telemetry data).

• Respond to product and customer service requests.

We do not sell, trade, or rent your operational data. We may share information we have collected about you in certain situations:

Third-Party Sub-Processors: To deploy our architectures, we utilize enterprise-grade sub-processors for cloud hosting, middleware routing, and vector databases (e.g., AWS, Pinecone, Google Cloud). We strictly mandate that all third-party infrastructure providers comply with SOC 2 Type II and GDPR standards, and we execute custom Data Processing Agreements (DPAs) that prohibit them from accessing or indexing your siloed data.

By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.

Cookies and Web Beacons: We may use cookies, web beacons, tracking pixels, and other tracking technologies on the Site to help customize the Site and improve your experience. Most browsers are set to accept cookies by default. You can remove or reject cookies, but be aware that such action could affect the availability and functionality of the Site.

We use administrative, technical, and physical security measures to help protect your personal and corporate data. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Our internal databases utilize AES-256 encryption.

We do not knowingly solicit information from or market to children under the age of 18. Our services are strictly designed for B2B enterprise engagements. If we learn we have collected personal information from a minor without verification of parental consent, we will delete that information as quickly as possible.

Depending on your location, you may have the right to:

• Request access and obtain a copy of your personal information.

• Request rectification or erasure of your personal data.

• Restrict the processing of your personal information.

• Data portability.

To make a request regarding your data, please use the contact information provided below. We will consider and act upon any request in accordance with applicable data protection laws.

Upon completion of a deployment sprint or termination of an Ongoing SLA, Stackgrid initiates a complete infrastructure handoff. All prototype environments, temporary vector databases, and sandbox testing data held on our servers are permanently destroyed. You retain absolute ownership and control of the production infrastructure.

If you have questions or comments about this Privacy Policy, require a Data Processing Agreement (DPA), or need to speak with our Security Architecture team regarding our compliance framework, please contact us.