1. Introduction

Timber Cloud ("we", "us", "our") operates the Timber Cloud managed inference platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information: When you sign up via GitHub OAuth, we receive your GitHub username, email address, display name, and avatar URL.

Model Data: When you upload machine learning models, we store the model artifacts in secure cloud storage. We do not inspect or analyze the contents of your models beyond what is necessary to compile and serve them.

Usage Data: We collect inference request metadata including timestamps, latency, input row counts, and HTTP status codes. We do not log the actual input data or prediction outputs.

API Keys: API keys are hashed before storage. We never store plaintext API keys after initial generation.

3. How We Use Your Information

We use collected information to:

Provide, operate, and maintain the Timber Cloud platform
Process and serve your machine learning models
Monitor service health and performance
Generate usage metrics and billing information
Send critical service notifications
Improve and develop new features

4. Data Security

We implement industry-standard security measures including:

Encrypted data transmission (TLS/SSL)
Row-level security (RLS) on all database tables
API key hashing with SHA-256
Isolated container environments for each deployment
Resource limits on inference containers (CPU and memory)

5. Data Retention

Model artifacts are retained as long as your account is active. Usage logs are retained for 90 days. When you delete a model or stop a deployment, associated containers are immediately terminated and artifacts are removed.

6. Third-Party Services

We use the following third-party services:

Supabase: Authentication, database, and file storage
GitHub: OAuth authentication provider
Vercel: Frontend hosting and analytics

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us or through your account settings. You may delete your account, which will remove all associated data.

8. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].