Privacy Policy

Welcome to HexGrid Cloud ("HexGrid Cloud", "we", "us", or "our").

We respect your privacy and are committed to handling personal information responsibly and in accordance with applicable data protection laws.

This Privacy Policy explains how HexGrid Cloud collects, uses, stores, shares, retains, and protects information when you access or use our website, dedicated GPU infrastructure, AI model deployment tools, ComfyUI environments, and related services (collectively, the "Services").

This Privacy Policy applies to information processed through:

• Our website at https://hexgrid.cloud.
• Customer registration and account management.
• Dedicated GPU computing services.
• One-click AI model deployment.
• ComfyUI cloud environments and workflows.
• Third-party model repository integrations.
• GPU usage monitoring and billing.
• Customer support and related communications.

This Policy should be read together with our Terms and Conditions.

Depending on the circumstances and applicable law, HexGrid Cloud may act as a controller or processor of personal information.

Where we process personal information on behalf of Customers, the Customer may determine the purposes and means of that processing.

HexGrid Cloud collects information reasonably necessary to provide, operate, secure, maintain, and improve the Services.

2.1 Account Information

When you create an account or interact with our Services, we may collect:

• Name or account display name.
• Email address.
• Account identifiers.
• Organization or company information.
• Authentication and login information.
• Account preferences and settings.
• Support requests and communications.

2.2 Billing and Transaction Information

When you purchase GPU computing resources, we may process information required for billing and payment administration.

This may include:

• Billing name and contact information.
• Billing address, where required.
• Transaction identifiers.
• Payment status and transaction history.
• GPU usage and billing records.
• Invoices and applicable tax information.

Payment transactions may be processed through independent third-party payment providers.

Where payment information is collected directly by a payment processor, that processor handles the information under its own applicable privacy and security policies.

The payment information available to HexGrid Cloud depends on the payment integration and the information necessary for billing operations.

2.3 Technical and Usage Information

When you access the website or use our Services, we may automatically collect technical information.

This may include:

• IP address.
• Browser type and version.
• Device and operating system information.
• Pages visited and interactions.
• Session information.
• Access timestamps.
• Error and diagnostic information.
• Security-related events.

We use this information for service operation, troubleshooting, security, usage analysis, and other purposes described in this Policy.

2.4 Deployment and Infrastructure Information

When you provision GPU resources or deploy AI applications, we may process operational metadata associated with your deployments.

This may include:

• GPU model and configuration.
• Deployment identifiers.
• Instance provisioning and termination timestamps.
• GPU allocation and usage duration.
• Selected AI models and workflows.
• Application configuration metadata.
• Deployment status and error information.
• Resource utilization metrics.
• Infrastructure and security logs.

This information may be required to provision infrastructure, troubleshoot deployments, calculate computing charges, and maintain the security and reliability of the Services.

3.1 Customer-Provided Authentication

Certain third-party AI models require authentication before they can be downloaded or installed.

HexGrid Cloud may allow Customers to provide authentication credentials associated with:

• Hugging Face.
• Civitai.
• Other supported third-party repositories.

Authentication credentials may be used to perform Customer-requested downloads and installation operations.

3.2 Purpose of Token Processing

Authentication tokens are processed for purposes related to providing requested Services, including:

• Authenticating with third-party repositories.
• Requesting access to Customer-selected model files.
• Downloading authorized model resources.
• Completing deployment operations.
• Performing subsequent authorized downloads where supported and requested.

HexGrid Cloud does not grant independent rights to third-party models through token authentication.

The applicable repository determines whether a token is technically authorized to access a requested resource.

3.3 Sharing With Third-Party Repositories

When authentication is necessary for a requested download, the relevant credentials or authentication information may be transmitted to the appropriate third-party repository.

Such repositories may independently process authentication information under their respective privacy policies.

3.4 Token Storage and Retention

The following describes how authentication credentials are handled:

HexGrid Cloud uses customer-provided authentication tokens, including Hugging Face and Civitai API tokens, solely to facilitate authorized model downloads, installations, and deployment operations. Where tokens are retained for continued functionality, they are protected using encryption at rest and secure transmission protocols such as HTTPS/TLS. Access to credentials is restricted to authorized systems and processes necessary for providing the Services. HexGrid Cloud does not sell or share authentication tokens with advertisers or unrelated third parties. Tokens may be securely transmitted to their respective repositories when required for authentication. Customers may revoke their tokens through the issuing platform and may contact HexGrid Cloud to request removal of credentials retained by our Services.

3.5 Customer Control

Customers remain responsible for maintaining the security of their repository accounts.

Customers should use narrowly scoped tokens where supported and promptly revoke credentials that may have been compromised.

Revoking a token through its issuing platform may prevent further authenticated downloads using that token.

Customers may contact HexGrid Cloud for information about credential handling and available removal procedures.

4.1 Dedicated GPU Environments

HexGrid Cloud provides computing environments in which Customers may install, execute, and manage software and AI workloads.

These environments may contain Customer-selected models, datasets, application configurations, scripts, checkpoints, and generated files.

4.2 Customer-Controlled Data

Customers may upload or process content within their computing environments.

This may include:

• Images and videos.
• Text prompts.
• Audio files.
• Model checkpoints and LoRAs.
• Training or reference datasets.
• ComfyUI workflow files.
• Generated AI outputs.
• Other Customer-provided files.

Customers are responsible for ensuring they have the appropriate rights and lawful basis to upload and process such information.

4.3 Access to Customer Environments

HexGrid Cloud may need to process limited operational information to provision, maintain, secure, or troubleshoot computing resources.

Access to Customer Content, where necessary, must be limited to authorized purposes and handled in accordance with applicable contractual and legal obligations.

The following describes any additional access, storage, or processing of Customer prompts and generated content:

HexGrid Cloud operates as a dedicated GPU infrastructure and automated AI model deployment provider. HexGrid Cloud does not independently collect, store, or retain customer prompts, uploaded images, videos, audio files, or AI-generated outputs in its application databases. Customer workloads execute within their provisioned GPU environments, and any content saved within those environments remains subject to the customer's selected storage configuration and resource lifecycle. HexGrid Cloud does not use customer prompts, uploaded media, or generated outputs to train AI models, build datasets, or perform content-based analytics. We may process limited infrastructure metadata, deployment information, and technical logs necessary for GPU provisioning, billing, security, troubleshooting, and service operations. Customers are responsible for managing and deleting files stored within their computing environments.

4.4 Customer Responsibility

Customers control the models, applications, workflows, and data they choose to run within their allocated environments.

Customers are responsible for implementing appropriate application-level security and complying with applicable data protection requirements for their workloads.

HexGrid Cloud remains responsible for security and privacy obligations applicable to the infrastructure and systems under its control.

Customers may use HexGrid Cloud computing resources to generate images, videos, text, audio, and other content using third-party AI models.

The processing of prompts, reference files, and generated outputs depends on the Customer's selected applications, models, and deployment configuration.

HexGrid Cloud does not claim ownership of Customer Content solely because it is processed using our computing infrastructure.

Customers retain whatever rights they lawfully hold in their inputs and outputs, subject to applicable laws and third-party licensing arrangements.

HexGrid Cloud may process operational metadata associated with generation activities where necessary for infrastructure management, security, or other disclosed purposes.

Any handling of the underlying prompts, input files, or outputs is subject to the practices described in Section 4.

HexGrid Cloud uses personal information for legitimate operational and business purposes consistent with this Policy and applicable law.

6.1 Providing Services

We may process information to:

• Create and manage Customer accounts.
• Authenticate account access.
• Provision GPU computing resources.
• Manage deployments and workflows.
• Perform Customer-requested model downloads.
• Provide infrastructure monitoring.
• Operate supporting platform functionality.

6.2 Billing and Payments

We process information necessary to calculate GPU usage, generate billing records, process payments, investigate billing discrepancies, and comply with applicable financial obligations.

6.3 Security and Fraud Prevention

We may process account activity, technical logs, network information, and related data to:

• Prevent unauthorized access.
• Detect fraudulent activity.
• Investigate security incidents.
• Identify infrastructure abuse.
• Maintain service reliability.
• Comply with applicable laws.

6.4 Customer Support

We may use information provided through support requests to investigate technical issues, respond to questions, and assist with Customer-requested operations.

6.5 Platform Improvement

We may analyze operational metrics, aggregated usage information, and diagnostic data to improve the performance, reliability, and functionality of the Services.

Where such activities involve personal information, we will process it in accordance with applicable privacy laws.

6.6 Service Communications

We may send transactional or operational communications concerning:

• Account security.
• Billing and transactions.
• Service interruptions.
• Infrastructure maintenance.
• Material changes to our Services.
• Legal or policy updates.

Marketing communications, where offered, will be handled in accordance with applicable consent and opt-out requirements.

Where applicable data protection law requires a legal basis for processing, HexGrid Cloud processes personal information on one or more applicable legal grounds.

7.1 Contractual Necessity

Processing may be necessary to provide requested Services, maintain Customer accounts, provision computing resources, or administer billing.

7.2 Legitimate Interests

Where permitted, processing may be necessary for legitimate interests such as infrastructure security, fraud prevention, troubleshooting, and service improvement.

These interests must be balanced against applicable individual privacy rights.

7.3 Legal Obligations

Certain processing may be required to comply with applicable laws, financial reporting obligations, lawful requests, or legal proceedings.

7.4 Consent

Where consent is required, we will seek it before carrying out the relevant processing.

You may withdraw consent where legally permitted, without affecting the lawfulness of processing carried out before withdrawal.

Other jurisdictions may recognize different lawful grounds or impose additional requirements, which HexGrid Cloud will apply where relevant.

8.1 Cookies

HexGrid Cloud may use cookies and similar technologies to operate, secure, and improve its website and Services.

Cookies are small files that websites may store on a user's device.

8.2 Essential Cookies

Essential cookies may be required for functionality such as:

• Account authentication.
• Session management.
• Security protections.
• Application functionality.
• Remembering necessary settings.

8.3 Analytics

Analytics technologies, where enabled, may help us understand website usage, identify performance problems, and improve user experience.

Information about the analytics and tracking technologies used by HexGrid Cloud:

HexGrid Cloud uses essential cookies and similar technologies where necessary for authentication, session management, security, and core platform functionality. We may also use website analytics technologies to understand visitor interactions, identify performance issues, and improve the reliability and usability of our Services. Analytics information is used for operational and service improvement purposes. HexGrid Cloud does not use customer AI prompts, uploaded images, videos, or generated outputs for website analytics. Where non-essential cookies or tracking technologies are used, applicable consent and privacy requirements will be observed. Users may manage browser cookies through their browser settings and any consent controls made available by HexGrid Cloud.

8.4 Cookie Preferences

You may be able to restrict or delete cookies through your browser settings.

Where applicable law requires consent for non-essential cookies, HexGrid Cloud will provide appropriate consent controls.

Disabling certain cookies may affect the functionality of some website features.

HexGrid Cloud may disclose personal information where necessary to provide the Services, operate its business, comply with law, or protect legitimate interests and rights.

9.1 Infrastructure Providers

We may use third-party datacenters, GPU infrastructure providers, network providers, and other technical suppliers.

These providers may process information necessary to deliver computing infrastructure and related services.

9.2 Payment Processors

We may share necessary billing and transaction information with payment service providers for payment processing, fraud prevention, and transaction administration.

9.3 Third-Party Model Repositories

Customer-requested downloads may involve sharing authentication information or technical request data with external model repositories.

This may include Hugging Face, Civitai, or other repositories selected by the Customer.

9.4 Service Providers

We may use service providers for hosting, technical support, analytics, communications, security, or other business functions.

Such providers are subject to appropriate contractual and legal obligations where required.

9.5 Legal Requirements

We may disclose information when reasonably necessary to comply with applicable law, a valid legal process, or a lawful government request.

We may also disclose information where legally permitted and necessary to investigate fraud, security incidents, or violations of our Terms.

9.6 Business Transactions

Information may be transferred as part of a merger, acquisition, restructuring, financing, or sale of business assets.

Such transfers will be handled in accordance with applicable legal requirements.

9.7 Sale of Personal Information

HexGrid Cloud does not intend to sell personal information as a business product.

Certain analytics, advertising, or data-sharing practices may be classified as a "sale" or "sharing" under specific privacy laws.

Where those laws apply, we will provide any required disclosures and opt-out rights based on the technologies actually used.

HexGrid Cloud may use computing infrastructure, service providers, or technical systems located in different jurisdictions.

Depending on the Services selected, personal information may be processed or transferred outside the country in which a Customer is located.

Where applicable law requires safeguards for international transfers, HexGrid Cloud will implement appropriate measures.

Such measures may include applicable contractual protections, lawful transfer mechanisms, or other safeguards recognized by relevant data protection laws.

The geographic location of a Customer's selected computing resource does not necessarily determine the location of every supporting operational system.

Customers with specific data residency requirements should verify the applicable infrastructure configuration and contractual arrangements before processing regulated data.

HexGrid Cloud recognizes the importance of protecting personal information and Customer computing environments.

We implement technical and organizational safeguards appropriate to the risks associated with the information and systems we control.

Depending on the relevant infrastructure and Services, security measures may include:

• Access controls.
• Authentication mechanisms.
• Infrastructure isolation.
• Security monitoring.
• Logging and incident investigation.
• Credential handling procedures.
• Operational security controls.

No internet-connected service or computing system can guarantee absolute security.

Customers are responsible for protecting their accounts, credentials, applications, and data within environments they administer.

HexGrid Cloud remains responsible for security obligations applicable to the systems and infrastructure under its control.

Where a security incident triggers legal notification obligations, HexGrid Cloud will provide required notices in accordance with applicable law.

HexGrid Cloud retains information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, subject to applicable legal requirements.

12.1 Account Information

Account information may be retained while an account remains active and for additional periods where required for legitimate legal or operational purposes.

12.2 Billing Records

Billing and transaction records may be retained for applicable tax, accounting, financial reporting, dispute-resolution, and legal compliance purposes.

12.3 Deployment and Infrastructure Logs

Technical logs and deployment metadata may be retained for troubleshooting, billing reconciliation, operational security, and compliance purposes.

12.4 Authentication Credentials

Authentication credentials are subject to the handling and retention practices described in Section 3.

12.5 Customer Workspaces

Data stored within GPU workspaces may be retained or deleted according to the applicable resource lifecycle and storage configuration.

Stopping a computing resource does not necessarily delete persistent storage or associated Customer data.

12.6 Retention Periods

The applicable retention periods or criteria are:

HexGrid Cloud retains account information, billing records, GPU usage data, and deployment metadata only for as long as reasonably necessary to provide the Services, maintain infrastructure security, resolve disputes, and comply with applicable legal obligations. Sensitive information retained by HexGrid Cloud is protected through appropriate technical and organizational security measures, including encryption where applicable and restricted access controls. Authentication credentials are retained only for as long as required to support the relevant authorized functionality. HexGrid Cloud does not independently retain customer prompts, uploaded images, videos, or AI-generated outputs in its application databases. Files stored within customer-controlled GPU environments or persistent storage remain subject to the applicable resource lifecycle and storage configuration. Customers may request deletion of eligible account information, subject to applicable legal and operational retention requirements.

12.7 Backups

Information deleted from active systems may remain temporarily in backups, security records, or other systems where retention is lawful and necessary.

Such information will be handled in accordance with applicable retention and deletion requirements.

Customers may have access to account and deployment management functionality through the HexGrid Cloud platform.

Depending on the available features, Customers may be able to:

• Update account details.
• Manage computing deployments.
• Stop or terminate GPU resources.
• Remove files from managed environments.
• Revoke third-party authentication tokens.
• Request correction of personal information.
• Request account or data deletion.

The availability of particular controls depends on the applicable Service.

Customers may contact HexGrid Cloud for assistance with account-related privacy requests.

Depending on your location and applicable law, you may have certain rights regarding your personal information.

These may include:

14.1 Right of Access

You may have the right to request information about personal data processed about you.

14.2 Right to Correction

You may request correction of inaccurate or incomplete personal information.

14.3 Right to Deletion

You may request deletion of personal information, subject to applicable exceptions and legal obligations.

14.4 Right to Data Portability

Where applicable, you may request a copy of certain personal information in a portable format.

14.5 Right to Object or Restrict Processing

You may have the right to object to or request restriction of certain processing activities.

14.6 Withdrawal of Consent

Where processing relies on consent, you may withdraw that consent where legally permitted.

14.7 Marketing Preferences

You may opt out of marketing communications using the applicable unsubscribe mechanism or by contacting us.

14.8 Exercising Your Rights

Privacy-related requests may be submitted to:

contact@hexgrid.cloud

HexGrid Cloud may request reasonable information necessary to verify identity or authority before fulfilling a privacy request.

Requests will be handled in accordance with applicable laws and legally required response periods.

Where applicable, individuals may also have the right to submit complaints to a competent data protection authority.

HexGrid Cloud provides infrastructure that Customers may use to process data for their own purposes.

When a business Customer determines the purposes and means of processing personal data within its workloads, that Customer may act as the data controller or equivalent role under applicable law.

HexGrid Cloud may act as a processor or service provider when processing such data on the Customer's behalf.

Customers are responsible for determining whether their processing activities comply with applicable data protection laws.

Where legally required, the parties may enter into a separate Data Processing Agreement.

HexGrid Cloud remains responsible for its own obligations under applicable privacy and data protection laws.

HexGrid Cloud may provide access to or integrations with third-party services, including:

• Hugging Face.
• Civitai.
• GitHub.
• AI model repositories.
• Payment service providers.
• Infrastructure providers.
• Other supported services.

These organizations may independently collect or process information under their respective privacy policies.

HexGrid Cloud does not control the independent privacy practices of third-party websites and services.

Customers should review the applicable policies before providing information to third parties.

HexGrid Cloud remains responsible for its own applicable obligations relating to the selection, use, and oversight of service providers.

HexGrid Cloud is primarily intended for developers, businesses, researchers, and other users of cloud computing infrastructure.

Our Services are not directed toward children.

We do not knowingly collect personal information from children in violation of applicable law.

If we become aware that personal information has been collected from a child in circumstances that violate applicable legal requirements, we will take appropriate steps to address the situation.

Parents or guardians may contact us at contact@hexgrid.cloud regarding related concerns.

HexGrid Cloud may process or disclose information where reasonably necessary to comply with applicable legal obligations.

This may include responding to:

• Valid court orders.
• Lawful government requests.
• Regulatory obligations.
• Fraud investigations.
• Security incidents.
• Intellectual property complaints.
• Other legally authorized proceedings.

Any such processing or disclosure will be subject to applicable legal requirements.

Where legally permitted and appropriate, HexGrid Cloud may notify affected Customers regarding requests for their information.

HexGrid Cloud may update this Privacy Policy to reflect changes in its Services, data processing practices, applicable laws, or operational requirements.

Updated versions will be published at:

https://hexgrid.cloud/privacy-policy

The Last Updated date will indicate when the Policy was most recently revised.

Where applicable law requires additional notice or consent for material changes, HexGrid Cloud will comply with those requirements.

Changes to this Policy do not eliminate statutory privacy rights or obligations.

If you have questions regarding this Privacy Policy, personal information, authentication tokens, data retention, security practices, or your privacy rights, please contact HexGrid Cloud.

Additional identity, representative, or contact disclosures may be provided where required by applicable law.