Privacy Policy
Version 3.0 · October 2026
1. Who we are
ComputePortal Inc., a Delaware corporation (“ComputePortal”, “we”, “us” or “our”), provides managed compute services through its website, dashboard, command-line tools, APIs and MCP server (the “Service”).
ComputePortal acts as a controller of personal data it processes for its own business purposes, including account management, billing, security and customer support.
Where the Service is used to process personal data contained in customer workloads on behalf of a customer, ComputePortal acts as a processor. The respective responsibilities of the parties are governed by applicable data protection law and, where required, a Data Processing Agreement.
For privacy-related questions or requests, contact us at connect@computeportal.io.
2. Data we collect
Depending on how you interact with the Service, we may collect and process the following categories of personal data:
- Account data: your name, email address, company name, role and identifiers associated with your sign-in method.
- Billing data: billing name and address, tax information, payment method details made available to us by our payment processor, and transaction history. Full payment card numbers are processed by Stripe and are not stored by ComputePortal.
- Usage and operational data: compute resources ordered, deployment metadata, service usage, logs and metrics reasonably necessary to operate, secure and support the Service, including records of actions performed through account credentials or access tokens.
- Team and delegate data: contact information, access permissions and available activity records relating to users or delegates authorized to access an account.
- Support and communications: messages, inquiries, support requests and information provided when arranging meetings or communicating with us.
- Technical and website data: IP addresses, browser and device information, website interactions and referral information, including data collected through cookies and similar technologies as described in our Cookie Policy.
- Customer workload content: applications, code, images, files and other data submitted to or processed through the Service. Such content may include personal data. We process it as necessary to provide, operate, secure and support the Service, but do not routinely inspect or analyze its contents for our own purposes.
The categories of data processed depend on the features used and the nature of the relevant Service.
3. Why we use personal data and our legal basis
We process personal data for the following purposes and, where the EU or UK GDPR applies, on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Creating and managing accounts, providing the Service, processing orders and payments, and providing customer support | Performance of a contract, where the individual is a contracting party; otherwise our legitimate interests in providing and administering the Service |
| Operating, securing and maintaining the Service, preventing fraud and abuse, and recording relevant activities of users, delegates and automated systems, including AI agents | Our legitimate interests in operating a secure and reliable Service |
| Maintaining billing, tax and accounting records and complying with applicable legal obligations | Compliance with a legal obligation |
| Understanding website usage and improving our website and services | Consent where required by law; otherwise our legitimate interests |
| Using a customer's name, logo or description of its use of the Service in marketing materials | Consent obtained separately from the customer |
| Responding to inquiries and managing business communications | Our legitimate interests in managing customer and business relationships |
Where we process personal data contained in customer workloads on behalf of a customer, we do so in our capacity as a processor, in accordance with the customer's documented instructions, applicable data protection law and any applicable Data Processing Agreement. The customer or other relevant controller is responsible for determining the legal basis for that processing.
We do not sell personal data.
4. Who we share personal data with
We may share personal data with third parties where reasonably necessary to provide, operate, secure and support the Service, administer our business or comply with applicable law. These may include:
- Infrastructure suppliers: data centre and cloud infrastructure providers that host or support the compute resources used to deliver the Service. We may change these suppliers as described in our Terms of Service.
- Payment service providers: including Stripe, for payment processing, fraud prevention and related services.
- Authentication providers: including Google, where you choose to use a supported third-party sign-in method.
- Website and business service providers: including providers of website hosting, analytics, email delivery, customer support and related operational services.
- Professional advisers and authorities: including legal, accounting and other professional advisers, and regulatory, judicial or governmental authorities where appropriate or legally required.
- Corporate transaction parties: potential purchasers, investors or successors in connection with a merger, acquisition, financing, restructuring or sale of our business, subject to appropriate confidentiality and data protection safeguards.
Where third parties process personal data on our behalf, we require appropriate contractual and security safeguards. Certain recipients may process personal data as independent controllers in accordance with their own legal obligations.
Where we engage infrastructure suppliers or other subprocessors to process personal data contained in customer workloads, the applicable Data Processing Agreement governs their authorization, relevant information requirements and changes.
We do not sell personal data or share it for targeted advertising purposes.
5. Where personal data is processed
ComputePortal is based in the United States. We and our service providers may process personal data in the United States and other countries in which we or they operate.
Customer workloads may be hosted or processed using infrastructure located in different countries. The location of a workload depends on the resources and infrastructure used to provide the Service and may change during the provision of the Service. Unless expressly agreed otherwise in writing, ComputePortal does not guarantee that workloads or related data will remain within a particular country or geographic region.
Where applicable data protection law requires safeguards for international transfers of personal data, we will use an appropriate lawful transfer mechanism, which may include adequacy decisions, applicable Standard Contractual Clauses, the UK International Data Transfer Addendum or other legally recognized safeguards.
International transfers of personal data processed by ComputePortal on behalf of customers are also subject to the applicable Data Processing Agreement.
6. Security
We implement reasonable and appropriate technical and organizational measures to protect personal data, taking into account the nature of the processing and associated risks.
Customers are responsible for safeguarding their account credentials and access tokens, including those provided to delegates, applications and AI agents.
No system is completely secure, and we cannot guarantee absolute security. Where ComputePortal processes personal data on behalf of customers, the applicable Data Processing Agreement governs our related data protection obligations.
7. How long we keep personal data
We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, taking into account the nature of the data, the relevant business and operational needs, applicable legal obligations, and the need to establish, exercise or defend legal claims.
Account, billing, transaction, usage and security records may be retained after an account is closed where reasonably necessary for these purposes.
Personal data contained in customer workloads is retained and deleted in accordance with the applicable Terms of Service, Data Processing Agreement and relevant technical processes. The availability of workload data following suspension, termination or deletion of a workload is not guaranteed.
Website and analytics data is retained in accordance with our applicable retention settings and Cookie Policy.
8. Your rights
Depending on your location and applicable data protection law, you may have rights concerning your personal data, including the right to request access, correction, deletion, restriction of processing or data portability, to object to certain processing, and to withdraw consent where processing is based on consent.
Residents of California and other jurisdictions may have additional rights under applicable privacy laws. We do not sell personal data or share it for cross-context behavioral advertising.
You may submit privacy-related requests to connect@computeportal.io. We will respond in accordance with applicable law, including any applicable time limits, exceptions and verification requirements.
Where a request concerns personal data processed by ComputePortal on behalf of a customer, we may refer the request to the relevant customer or other controller and provide assistance as required by applicable law and the relevant Data Processing Agreement.
Where applicable, you may also lodge a complaint with a competent data protection authority.
9. Children
The Service is intended for business and professional use and is not directed at individuals under the age of 18.
We do not knowingly collect personal data directly from children under 18 for our own purposes. Personal data contained in customer workloads is processed on behalf of the relevant customer and is subject to the applicable Data Processing Agreement.
10. Using your company name
We will use a customer's name, logo or description of its use of the Service in our marketing materials only with the customer's separate, affirmative consent.
The customer may withdraw that consent at any time by contacting us. Following withdrawal, we will cease new uses.
We may publish anonymized information about use of the Service, provided it does not identify the customer or any individual.
11. Changes and contact
We may update this Privacy Policy from time to time to reflect changes in our services, practices or applicable law.
The current version will be made available on our website, together with its effective date. Where required by applicable law, we will provide additional notice of material changes.
For questions about this Privacy Policy or our processing of personal data, please contact us at connect@computeportal.io.
For AI agents: /llms.txt. Docs: docs.computeportal.io.