Privacy Policy
Last updated: March 15, 2025
At Wollnut Labs, we take your privacy seriously. This policy explains what data we collect, how we use it, and your rights regarding your personal information.
1. Information We Collect
We collect information you provide directly: name, email address, and payment information (processed by Razorpay). We also collect usage data including instance creation/deletion events, login times, IP addresses, and API usage logs for security and billing purposes. We do not access or monitor the contents of your GPU instances.
2. How We Use Your Information
We use your information to: provide and maintain the Service, process payments and billing, send account-related notifications (instance status, low balance warnings), improve the Service through aggregated analytics, respond to support requests, and comply with legal obligations.
3. Data Storage and Security
Your account data is stored in a PostgreSQL database. Passwords are hashed with bcrypt. API keys are hashed with SHA-256 before storage. All communications are encrypted via TLS. We follow industry-standard security practices to protect your data.
4. Third-Party Services
We use the following third-party services: Razorpay (payment processing — subject to Razorpay's privacy policy), E2E Networks (GPU infrastructure — your instance data resides on their hardware), Google and GitHub (OAuth authentication — only profile information is shared), and analytics tools for aggregated usage metrics.
5. Instance Data
Data stored on your GPU instances is your responsibility. When you destroy an instance, the associated storage is permanently deleted. We do not backup instance data. We recommend using persistent volumes or external storage for important data.
6. Cookies
We use essential cookies for authentication (session tokens) and preferences. We do not use tracking cookies or third-party advertising cookies.
7. Data Retention
Account data is retained for as long as your account is active. Billing records are retained for 7 years as required by law. Audit logs are retained for 1 year. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
8. Your Rights
You have the right to: access your personal data, correct inaccurate data, delete your account and associated data, export your data, and opt out of non-essential communications. To exercise these rights, contact us at privacy@wollnutlabs.com.
9. Data Transfers
Your data may be processed in India where our infrastructure partner operates. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for any cross-border data transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email. The latest version will always be available on this page.