Version 2026-10-02
This Privacy Policy describes how NuovoForte Corp. ("NuovoForte," "we," "us") collects, uses, and shares information in connection with the AI Sandbox platform ("the Service").
Account information: name, email address, company (optional), and a hashed password. We never store your password in plain text.
Usage and billing data: which sandboxes you launch, GPU/provider selections, runtime, and the resulting charges — needed to operate quotas, billing, and the usage dashboards the Service itself shows you.
Pilot or beta intake data: if you apply for early access, the workload, pain-point, and GPU-provider answers you submit, along with a verification link (e.g. a GitHub profile) used for pilot or beta cohort screening.
Abuse-prevention signals: the IP address a request came from — used only to detect one person claiming multiple limited pilot or beta slots under different email addresses. We do not fingerprint your browser or device. The IP address from a pilot or beta application is also resolved to an approximate city/region for cohort review — see Section 3, which names the third party that performs that lookup.
Secrets:API keys/tokens you optionally store (e.g. for Hugging Face, W&B, GitHub) are encrypted at rest and are never displayed back to you or anyone else after you save them — only injected as environment variables into sandboxes you launch.
We do not access the contents of your compute workloads (your code, models, or data running inside a sandbox) except as needed to operate the Service, to investigate a suspected Terms violation, or as required by law — see the Terms of Service, Section 5.
Copilot conversations: messages you send to the Copilot and responses generated during those conversations, together with relevant contextual information required to provide the Copilot service.
Copilot memory: where you enable memory, preference notes maintained to help the Copilot provide more relevant assistance. Available memory controls allow you to view, edit and delete those notes.
Compute Providers(e.g. RunPod, Vast.ai, Lambda Cloud, Shadeform, AWS): only what's needed to provision a sandbox you requested — never your account password or stored secrets beyond what you've explicitly configured to inject into that launch.
Payment processing: billing is handled by a third-party payment processor (Stripe); NuovoForte does not store your raw card number.
IP geolocation: if you submit a pilot or beta application, we send the IP address it came from to ipwho.is, a third-party lookup service, which returns an approximate city/region we store alongside your application for cohort review. Only the IP address is sent — never your name, email, or any answer you submitted. The lookup is made over an encrypted connection, and is best-effort: if it fails, your application is unaffected and no location is recorded.
Advertising measurement (Google) — not currently in use. We are not running advertising measurement today: no advertising tag is loaded on this site, and Google LLC receives nothing from us. We name it here so that the disclosure exists before the processing does, rather than after.
If we do enable it, it will run only for visitors who have given consent, and only on these terms. Role: Google would act as an independent controller of what it receives, deciding its own purposes and retention — not as a processor acting on our instructions. Purpose:conversion measurement only — telling us which advertisement brought a visitor to us. We do not use it to build an advertising profile: personalised advertising signals are disabled in the tag's configuration. Data categories: with your permission, Google may receive the page URL, IP address, browser and device information, and advertising identifiers. What it never receives from us: your name, email address, password, stored secrets, or the contents of your sandboxes. Transfer: Google processes this outside Canada, including in the United States. Retention: Google applies its own retention to what it receives; the campaign tags we store on your device to attribute a signup are kept for 30 days and then expire.
AI model providers: AI Sandbox includes a Copilot assistant. When you use the Copilot, information necessary to generate and contextualize its response may be disclosed to a third-party AI model provider. This may include the content of your Copilot conversation, relevant application context, results of actions or tools used on your behalf and, where you have enabled Copilot memory, preference notes associated with that feature.
We currently use Anthropic, PBC as the primary AI model provider and OpenAI, L.L.C. as a fallback provider. We use commercial API services provided by these companies. Their processing, retention and other handling of information submitted through those services is subject to the applicable contractual terms and data-handling arrangements governing those services. NuovoForte does not intentionally opt customer Copilot conversations into provider model-training programs.
Your password, stored secret values, cloud-account credentials and payment-card details are not provided to the Copilot model. Contents of your sandbox files or datasets are not provided to the Copilot model unless you request functionality that requires the Copilot to access specific content. If our AI model providers materially change, we will update this Privacy Policy as appropriate.
Processing outside Canada: we use service providers, including hosting and AI model providers, that may process personal information outside Canada, including in the United States. When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction. Questions about our use of service providers outside Canada or our handling of personal information may be directed to our Privacy Officer at support@nuovoforte.com.
Service providers who help us operate the platform (e.g. email delivery, hosting), bound by confidentiality obligations.
We do not sell your personal information.
We retain account and billing data for as long as your account is active, and as needed to comply with legal, tax, or accounting obligations after that. Pilot or beta intake data for an application that never converts to an account is retained for a limited period for cohort-integrity purposes, then deleted or anonymized.
Copilot conversations: we retain the messages in a Copilot conversation for 90 days after the last message in that conversation, after which their content is deleted automatically. You can delete a conversation at any time from the Copilot panel; deleting removes its messages from our systems. Records of Copilot usage and cost, which contain no message content, are retained with your billing data.
You can review and update your account information from within the Service, and can request account deletion or a copy of your data by contacting support@nuovoforte.com. Depending on where you live, you may have additional rights (e.g. under GDPR or CCPA) to access, correct, or delete your personal information, or to object to certain processing.
Essential storage. We use local storage to keep you signed in, to remember your display preferences, and to hold a draft of a form you have started so it survives a reload. These stay on your device, are not sent to any third party, and are not used to track you across other websites. You can clear them at any time through your browser; signing out removes the ones that keep you signed in.
We do not fingerprint your browser or device. An earlier version of this policy said we ran a browser-fingerprinting library during signup. That library was removed on 30 August 2026 and the data it had collected was deleted with it. Nothing has replaced it.
Advertising measurement, only if you agree. If you consent, we set a Google Advertising cookie that tells us which advertisement brought you to us. We ask before setting it, nothing is set unless you accept, and declining changes nothing about how the Service works. We do not use it to build an advertising profile of you: personalised advertising signals are disabled. Section 3 names Google as the recipient and sets out its role, what it would receive, what it never receives from us, and how long any of it is kept.
Changing your mind. You can withdraw consent at any time from the control below. Withdrawal stops the cookie being set on future visits; to remove a cookie already stored, clear cookies for this site in your browser.
Where this applies. Visitors in the EU, EEA, UK and Switzerland are asked before any non-essential storage is used, as required by the ePrivacy Directive and the GDPR. We apply the same prompt to all visitors regardless of location.
We may update this Privacy Policy from time to time. Material changes will be reflected in a new version (shown above) and, where practical, notified to active accounts.
Questions about this Privacy Policy: support@nuovoforte.com