Privacy Policy
Last updated 26 August 2026
This Privacy Policy explains what data Datalier collects, why, and what we do — and do not — do with it.
1. Data ownership
You own your data. All raw inputs, datasets, annotations, labels, model outputs, and derived artifacts uploaded to or generated within Datalier remain your exclusive property.
Concave AI claims no ownership, licence, or interest in your data beyond the limited processing rights necessary to provide the service.
On account termination, all data is permanently deleted within 30 days. Export is available at any time in standard formats.
2. We do not train on your data
We do not train on your data.Concave AI does not use customer data to train, fine-tune, or improve any foundation model, whether our own or a third party's.
Your data is used solely to deliver the service you requested. It is not pooled, aggregated for model development, or shared with any party for training purposes.
Where processing requires third-party AI providers, we use API endpoints configured with zero-retention or opt-out-of-training settings where the provider offers them.
3. Sub-processors
Data may be transmitted to the following third parties strictly to deliver the service:
| Sub-processor | Purpose | Location |
|---|---|---|
| Google Cloud Platform (Google LLC) | Object storage for datasets and files | India (Mumbai region) |
| OpenAI, L.L.C. | Text and vision annotation (LLM inference) | USA |
| Replicate, Inc. | Image/video segmentation & detection (SAM-2, YOLO) | USA |
| Deepgram, Inc. | Audio transcription & diarization | USA |
| AssemblyAI, Inc. | Audio transcription | USA |
| Stripe, Inc. | Payment processing | USA / EU |
| Functional Software, Inc. (Sentry) | Error monitoring | USA |
| Resend | Transactional email delivery | USA |
| [Application hosting provider — TBD] | Compute for the API, dashboard, and background workers | [TBD] |
The hosting provider row is a placeholder — fill it in once your production hosting is finalised, then remove this note. We provide 30 days' notice before adding or replacing a sub-processor. Subscribe to notifications at legal@theconcaveai.com.
4. What we collect
Account details, usage telemetry, uploaded content, and the AI Output generated from it.
5. Legal basis
Contract performance (delivering the service you signed up for), legitimate interest (security, abuse prevention), and consent (analytics cookies, marketing where applicable).
6. Retention
Account data: active plus 30 days after termination. Logs: 90 days. Billing records: 7 years (tax/accounting requirement).
7. Your rights
Access, rectification, erasure, portability, and objection. Contact privacy@theconcaveai.com — we commit to a 30-day response.
8. International transfers
Where personal data is transferred outside the UK/EEA to a sub-processor above, Standard Contractual Clauses apply. See our Data Processing Addendum for the full mechanism.
9. Security
Encryption in transit (TLS) and at rest, envelope-encrypted credential storage, role-based access control, and audit logging.
10. Children
Datalier is not intended for use by anyone under 18.
11. Contact
privacy@theconcaveai.com