Privacy Policy
What we collect on the ClusterBid website and console, why we collect it, how long we keep it, and how to ask us about your data.
Overview
This policy describes how ClusterBid ("we", "us") handles personal information collected through clusterbid.com, related pages such as the blog, tools, and sign-in, and the customer console that sits behind them.
It covers two audiences: people who visit the public site or send us a quote, and customers who use Compute, Lab, or Inference through the console. It is a content draft for this product, not a substitute for a signed data processing agreement.
Who we are
ClusterBid is a GPU and inference exchange. We help AI teams source compute, run open-weight models, and serve inference. The public site is a marketing and sourcing desk. The console is the product surface for accounts, clusters, training, and serving.
The contracting entity for paid services is the one named on your order form or master agreement. For privacy requests about this website or the console, write to privacy@clusterbid.com.
Information we collect
You give us
- Quote and contact details: name, email, company, GPU needs, region, timeline, and notes submitted through Request compute or Book a call.
- Supply-side details if you list capacity: facility contacts, fleet information, and related operational facts.
- Account details if you sign in to the console: work email, password (stored as a hash, not in the clear), organization, and region preference.
- Support and security emails you send us.
We collect automatically
- Standard request logs from our host: IP address, user agent, referring page, timestamps, and pages viewed.
- Analytics, where enabled: Google Analytics and Microsoft Clarity, which may set cookies and record usage patterns, including session replay in Clarity.
- Console telemetry if you are signed in: pages opened, feature use, job status, token counts, latency, error codes, and spend metadata. We do not persist prompt or completion text as a default.
- Tool inputs you type into public utilities such as the GPU Recommender (model name or parameter count). Those lookups may hit Hugging Face or similar public model indexes.
How we use it
We use this information to:
- Respond to quote requests, DC intake, and sales conversations.
- Operate Compute, Lab, and Inference, including billing, rate limits, and abuse detection.
- Keep the site and console available, measured, and improved.
- Meet legal, tax, and security obligations.
We do not sell personal information. We do not use customer prompts, completions, or uploaded training data to train our own models, or the base models we serve.
Legal bases
Where GDPR or similar laws apply, we typically rely on:
- Contract, or steps before a contract, for quotes, accounts, and paid services.
- Legitimate interests for security, fraud prevention, and product analytics that are not strictly required to run a request.
- Legal obligation for tax, accounting, and lawful requests.
- Consent, where we ask for it (for example optional analytics cookies).
Retention
- Quote and sales leads: for the sales cycle, then up to 24 months unless you ask us to delete sooner.
- Account data: for the life of the account, then as required for tax and legal records (typically up to 7 years).
- API and job metadata: about 90 days in active systems, then up to 1 year in archive.
- Fine-tuning uploads: deleted about 30 days after the job ends, unless you keep an adapter.
- Support mail: about 2 years after the thread closes.
- Analytics: according to the provider's default, usually 14 months or less.
Security
We use HTTPS, access control, and industry-standard hosting. Console passwords are hashed. No internet service is perfectly secure. Report suspected incidents to security@clusterbid.com.
International transfers
We and our processors may handle data in the EU, the United States, India, and other regions where we or a facility partner operate. For EU personal data processed on a customer's behalf, a data processing agreement and Standard Contractual Clauses (or an equivalent) should be in place before that data is sent through the services.
Your rights
Depending on where you live, you may be able to access, correct, delete, export, or object to certain processing of your personal information. EU and UK residents have GDPR rights. California residents have CPRA rights; we do not sell personal information. India residents may have rights under the DPDP Act.
Write to privacy@clusterbid.com. We aim to reply within 30 days. You may also complain to your local data protection authority.
Children
ClusterBid is a business service. It is not directed at children, and we do not knowingly collect information from anyone under 18.
Changes
We will update this page as the product changes. The date at the top is the marker. Material changes that affect console customers will also be flagged in product or by email when accounts exist.
Contact
Privacy: privacy@clusterbid.com
Security: security@clusterbid.com
Legal: legal@clusterbid.com
Related pages on this site: Terms of Use. Console customers should also expect a data processing agreement and acceptable use policy alongside any paid order.