Privacy policy

This policy describes how Sunaiva Digital ("Sunaiva", "we") handles data across the Sunaiva Core developer products — Sunaiva Gate, the Triple-Gate Validation MCP, and the roadmap products Memory and Ship Confidence. It is written for engineers; it favours precision over reassurance.

What runs locally

The free Constitutional Gate tier runs entirely on your machine. Its 34 local rules evaluate on-device, with no network dependency and no account. The audit log is a plain JSONL file written to ~/.sunaiva/audit/audit.jsonl on your own disk. We do not receive it.

What we collect

• Account & billing data — for paid tiers, an email address and the billing details handled by our payment processor. We do not store full card numbers.
• Premium rule-evaluation requests — when a paid tier calls the backend for server-side rules, the request payload required to evaluate those rules is transmitted to mcp.sunaivacore.io and processed transiently.
• Operational telemetry — minimal request metadata (timestamps, status codes, coarse error categories) needed to run and secure the service.

Sub-processors & model routing

Where a product feature requires model inference or embeddings, requests are routed through OpenRouter, and embeddings are computed using Gemini. Sunaiva does not route inference or embeddings through OpenAI as part of its product pipeline. We use a payment processor for billing and a cloud edge provider (Cloudflare) for delivery and the backend Worker.

What we do not do

• We do not sell personal data to data brokers.
• We do not bulk-email. Early-access interest is used only to contact you about the products you selected.
• We do not train models on your private rule-evaluation payloads.

Retention

Premium rule-evaluation payloads are processed transiently and not retained beyond what is needed to return a verdict, except where a paid tier explicitly enables audit retention. Operational telemetry is retained for a limited operational window. Local audit logs live on your disk and are entirely under your control.

Your rights

You may request access to, correction of, or deletion of the account data we hold about you. Contact us through the channel listed on the Security page and we will respond within a reasonable period.

Changes

We may update this policy. Material changes affecting existing customers are communicated by email. Continued use after an update constitutes acceptance.