Open beta. Registered accounts may submit free browser scans of eligible public model revisions through the 7B class, within their account quota. Models above the 7B class are not scanned in this beta. Results remain research-stage. Payment collection and invoicing are disabled.

Pre-launch controller notice. The public legal entity name and postal address are not yet published. For that reason paid processing remains unavailable; this page is a transparent working notice, not the launch notice. Data questions may be sent to hello@tetracta.ai.

What we store. If you apply for access: the details you enter on the application form — name, work email, organization, website, role, model family/size, deployment status, use-case note, country and referral — plus derived review score/recommendation, status, cohort and invitation metadata; configured delivery may forward the application to our own inbox. If you hold an account: account email + scrypt-hashed password; job metadata (model repo IDs, timestamps, status); generated reports. Public HF-reference weights are fetched by scan workers, when scanning is enabled, and follow the worker cache/lifecycle policy; they do not transit the web relay. Browser scans of eligible public model revisions are open in the current beta. Private-token and customer-upload launches are disabled pending isolation, egress and verified-deletion review. The current code contains a sealed-credential design, but this is not a promise that private processing is available or approved. No raw IP address is stored; IP is used transiently for rate-limiting only.

Legal bases. Account & scan processing: GDPR Art. 6(1)(b) — steps taken at your request to provide the service (and, before any contract, pre-contractual steps); plus Art. 6(1)(f) legitimate interest in operating and securing the service. Access applications: Art. 6(1)(b) pre-contractual + Art. 6(1)(f) reviewing your request. KVKK equivalents (m.5) may apply. Free-text fields must not be used for special-category data; because submitters control those fields, we do not claim such data can never be received. Contact us to remove unintended content.

What we never do. No training on your models. No third-party tracking or behavioral telemetry. No sale/sharing of your data. No tracking cookies — only a security-only signed session cookie. Public-reference scans may contribute a versioned aggregate measurement ledger while their live job exists; private-token and uploaded jobs are excluded, and self-service deletion removes the linked row.

Report retention & self-serve deletion. Reports stay in your account until you delete them: every scan has a Delete action on your dashboard with a two-step confirmation. Deletion removes the report file, measured metrics, images and job record from the live service immediately, and share links stop working at the same moment. Access-restricted operational backups may retain prior data for disaster recovery and are not available through the product. Their retention, expiry and deletion- after-restore controls remain under review; no fixed expiry is promised in this pre-release. Payments remain paused until a counsel-approved schedule and enforceable deletion ledger are in place; browser scans of eligible public model revisions are open in the current beta under the retention terms above. Account/application retention is likewise pending that reviewed schedule; erasure requests are handled manually during the pre-release period.

Your rights. You may request access, rectification, erasure, restriction, objection, and data portability for anything you submitted (GDPR Art. 15–22; KVKK m.11). Email hello@tetracta.ai. Requests are handled manually during pre-launch; this notice makes no unsupported claim of an automated request ledger or a fixed response time. Applicable statutory deadlines still govern. You also have the right to lodge a complaint. As Tetracta is established in Türkiye, our supervisory authority is the KVKK (Kişisel Verileri Koruma Kurumu); if you are in the EU/UK you may also complain to your own national data-protection authority.

Current provider map (not a contractual subprocessor register). Hetzner may host the EU web plane; Hugging Face is the public model registry; configured email delivery may use Google Workspace; An external GPU provider and a merchant-of-record are contemplated but are not authorized merely by appearing here. The exact counsel-reviewed subprocessor/transfer register in a paid order controls. We do not currently promise selectable or enforced EU-only GPU/storage residency.