Privacy Policy

1. Scope and operator

This Policy applies to the Blackfrost website, model store, local inquiry builder, model delivery, support communications, and related online interactions that link to it. “Blackfrost,” “we,” and “us” refer to Blackfrost Softwares Corp, operating the Blackfrost brand.

Independent services such as Stripe, Hugging Face, X, and upstream model developers also process information under their own policies. Blackfrost is based in Las Vegas, Nevada. Privacy questions may be sent to support@blackfrostai.com.

2. Information we collect

Model purchases

• Contact details supplied at checkout, such as name, email address, billing address, and country.
• The Hugging Face username supplied for gated-repository delivery.
• Order details for each selected item, such as model SKU, price, currency, time, Stripe Checkout and PaymentIntent identifiers, payment status, policy versions and upstream-license references accepted, fulfillment status, and repositories granted.
• Stripe receives payment-method and card information directly. Blackfrost does not receive or store the full card number or CVV.

Device-local storefront data

• The versioned blackfrost-model-cart local-storage record contains only the model slugs selected for the cart and the storage-format version. It does not contain payment details, policy acceptance, a Hugging Face username, or account credentials.
• The record remains until the visitor clears it, browser site data is removed, or this browser returns to the cart page and receives a verified fulfilled or compliance-refunded state, at which point matching purchased slugs are removed. See the Cookie Policy for controls.

Communications and consulting

• Support, compatibility, licensing, security-reporting, and customer-service communications you choose to send.
• Authorization, organization, and engagement information supplied for custom model, security-research, hosting, or consulting work after an appropriate channel is established.

The inquiry builder runs locally in the browser. Its fields are not submitted to or saved by Blackfrost; choosing its email action opens the visitor’s email application.

Information collected automatically

• Hosting and security logs that may include IP address, request time, browser or device information, requested URL, referring URL, and security events.
• Device-local preferences and necessary storefront storage described in the Cookie Policy.

Do not send health data, account credentials, exploit code, customer data, full card numbers, passwords, or access tokens through an initial support message.

FrostByte private beta

FrostByte’s invite download service uses essential browser access, hashed invite and session records, terms acceptance timestamps, abuse-prevention records, and private Google Cloud Storage delivery. The desktop app also connects to the download services and devices the user chooses. The FrostByte Privacy Notice gives the app-specific details, retention information, and controls.

3. How we use information

• Create and secure checkout sessions, verify payment events, prevent price tampering, record the applicable policy notice and payment-confirmed acceptance, and fulfill model access.
• Respond to support and inquiry messages and assess consulting fit.
• Protect the website, models, repositories, and infrastructure against fraud, misuse, abuse, and security threats.
• Comply with tax, accounting, sanctions, export-control, legal, and regulatory obligations.
• Establish, exercise, or defend legal claims and enforce our terms and licenses.
• Improve content and operations using direct feedback and aggregate operational observations, not third-party behavioral advertising profiles.

Where a legal basis is required, processing may rely on steps requested before a contract, performance of a contract, compliance with law, legitimate interests in secure and effective operations, consent, or another basis permitted by applicable law.

4. When information is disclosed

We disclose information only as reasonably necessary to operate the website, process and deliver an order, provide support, protect rights, or comply with law. Categories of recipients include:

• Stripe for hosted payment checkout, fraud prevention, payment records, and receipts.
• Hugging Face to grant the username entered at checkout access to each purchased gated repository.
• Firebase and Google Cloud for website hosting, secrets, security logs, and restricted order, consent, event, and fulfillment records.
• Email and communication providers when you send a message or choose an external communication channel.
• Professional advisers and contractors subject to appropriate confidentiality and access restrictions.
• Authorities, counterparties, or successors when reasonably required by law, court process, safety, fraud prevention, enforcement, financing, reorganization, or an asset transaction.

We do not sell personal information for monetary consideration and do not share it for cross-context behavioral advertising. We do not knowingly sell or share personal information of minors.

5. Retention and security

We retain checkout intents, orders, payment references, policy and acceptance versions, fulfillment records, and related communications as reasonably needed for delivery, support, disputes, fraud prevention, security, tax, accounting, sanctions, export records, and other legal obligations. Retention varies by record and may be extended for an active dispute, investigation, or legal hold.

Order and event records are written by server-side services and are not directly writable from the public browser. Secrets are stored outside the source repository. No transmission, storage system, or security measure is guaranteed to be completely secure.

6. Privacy rights and requests

Depending on location and applicable law, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about use and disclosure, and to receive nondiscriminatory treatment for exercising a right.

Email support@blackfrostai.com, identify the right requested, and avoid attaching sensitive verification material until Blackfrost provides an appropriate channel. We may request proportionate verification and may deny or limit a request where law permits.

Blackfrost does not currently sell personal information or use it for targeted advertising. Eligible California and Nevada residents may use the same address for applicable state-law requests.

7. Cookies, Do Not Track, and GPC

This website uses device storage only for necessary storefront functions and user-requested preferences, including preserving the selected model slugs in the cart. It does not use analytics, advertising, social-media pixels, or cross-site profiling. Because we do not sell or share personal information for targeted advertising, Global Privacy Control and Do Not Track signals do not cause a different advertising workflow.

See the Cookie and Similar Technologies Policy, clear the cart to remove its stored model slugs, or use “Privacy choices” in the footer to review the current categories.

8. International users

Blackfrost operates from the United States. Information may be processed in the United States and other countries where providers operate, which may have different data-protection laws. We use legally required safeguards for restricted international transfers where applicable.

Model availability may be limited by licensing, sanctions, export controls, consumer law, or operational requirements.

9. Children, changes, and contact

The website and model store are intended for adults and business users, not children under 18. We do not knowingly collect personal information from children.

We may update this Policy as services, providers, or legal requirements change. Material changes are identified by a new effective date and, when appropriate, an additional notice.

Questions and privacy requests: support@blackfrostai.com.