Privacy Policy

1. Who we are

"Sector88", "we", "us" and "our" refer to Sector88 and its operating entities. The website at sector88.co and the software products Runtime and Hub are operated by Sector88.

If you have questions about this policy, email privacy@sector88.co.

2. What this policy covers

This policy covers the personal information we collect through:

• Our website, sector88.co and its subdomains.
• Our self-serve checkout and licence-issuance systems.
• Email, calls, and other direct communication with our team.
• Customer support interactions relating to Runtime and Hub.

It does not cover inference traffic, prompts, completions, or any data you process with Runtime or Hub. Those run inside your environment and we do not see them. See section 6.

3. Information we collect

Information you give us. Name, work email, company, role, phone number, billing address, and anything else you put in a form, email, or booking. If you purchase a licence, our payment processor (Stripe) collects card or bank details. We do not store card numbers on our systems.

Information collected automatically. When you visit the website we collect standard log data: IP address, user agent, referring URL, device and browser information, approximate location derived from IP address, referring URL, pages viewed, and interaction events such as button clicks or form submissions. We use analytics and product analytics tools to understand traffic, improve the website, and diagnose broken journeys. We do not sell this information and we do not use it for advertising.

Licence validation. If you run a Pro or Enterprise licence in online mode, your Runtime contacts our licence server to confirm the licence is valid. The request includes the licence key, a hardware fingerprint (a hash, not hardware identifiers we can resolve back to a machine), the CLI version, and a timestamp. It does not include prompts, completions, model names, or content of any kind. Enterprise deployments can run fully offline with no licence checks.

Community usage telemetry. Community Edition sends an anonymous, content-free heartbeat on first run and once every 24 hours, on a documented and versioned schema. It contains an install UUID (generated locally, does not resolve to a person), version, OS, CPU architecture, GPU family, GPU generation bucket, RAM bucket, backend, bucketed fleet size, and bucketed request and error counts. It does not contain prompts, completions, model names or weights, IP addresses we retain, or any user identifier. The full schema is published at /security#telemetry. To disable telemetry, set the environment variable S88_TELEMETRY=off. Pro and Enterprise deployments default to telemetry off.

4. How we use information

• To operate the website, licence server, and checkout.
• To respond to enquiries and support requests.
• To issue and validate licences, detect fraudulent licence sharing, and enforce our terms.
• To send service communications (licence delivery, invoices, expiry reminders, security notices).
• To send product updates if you have opted in. You can unsubscribe at any time.
• To comply with law and protect our legal rights.

We do not sell personal information. We do not use personal information to train AI models.

5. Sharing information

We share personal information only with:

• Stripe: payment processing.
• Vercel: website hosting, web analytics, and performance monitoring.
• Analytics providers: website analytics, product analytics, and session diagnostics where enabled. These may include Google Analytics, PostHog, or Umami depending on the current configuration.
• Email delivery providers: transactional email (licence keys, invoices, password resets).
• Professional advisors: accountants, lawyers, auditors, bound by confidentiality.
• Authorities: if required by law, subpoena, or to protect safety.

Each processor handles personal information under a written agreement that limits what they can do with it.

6. What we never collect

Across all tiers, Sector88 Runtime and Hub never:

• Transmit prompts, completions, or inference content to us.
• Transmit model weights or your training data to us.
• Transmit user identifiers, audit logs, or error messages from your deployments to us.

Pro and Enterprise deployments default to telemetry off. Enterprise deployments can run fully offline with zero outbound calls and no licence checks. Community sends the documented telemetry in section 3; set S88_TELEMETRY=off to disable.

7. Cookies and tracking

The website may use cookies or local storage for analytics, product analytics, and session diagnostics. We configure these tools for product and traffic measurement, not third-party advertising or cross-site ad targeting. Where session diagnostics are enabled, form fields and typed input are masked and we respect browser Do Not Track where supported.

8. Retention

We keep personal information only for as long as needed for the purposes described above, and then delete or anonymise it. Billing records are retained for the period required by tax and accounting law. Licence records are retained for the lifetime of the licence plus the period required to resolve disputes.

9. Security

We protect personal information with TLS in transit, encryption at rest, access controls, audit logging, and the principle of least privilege. We follow a secure-by-design engineering process and publish a software bill of materials for our products. See /security.

10. Your rights

Depending on where you live you may have rights to access, correct, delete, restrict, or port personal information we hold about you, and to object to processing. To exercise any of these rights, email privacy@sector88.co. We will respond within a reasonable period, and always within any period required by law.

If you are in the UK or EU, you have the right to lodge a complaint with your supervisory authority.

11. International transfers

Our processors may store personal information in jurisdictions outside your country of residence. We rely on standard contractual clauses or equivalent safeguards to protect personal information transferred across borders.

12. Children

Our products are not directed to children under 16. We do not knowingly collect personal information from children.

13. Changes to this policy

We will update this page when our practices change. The "Last updated" date at the top reflects the most recent change. For material changes we will make reasonable efforts to notify affected users, for example by email or an in-product notice.

14. Contact

Questions, complaints, or data-subject requests: privacy@sector88.co.