Privacy Policy
Last updated: 12/08/2026
This Privacy Policy explains how Robottik Ltd ("we", "us", "our"), operating as Scalattice, collects, uses, shares, and protects personal information when you visit scalattice.com (including scalattice.ai, scalattice.app, and scalattice.network, which serve the same site), use Scalattice Cloud (including scalattice.cloud), call the Scalattice inference API (including api.scalattice.cloud), register as a provider, download or run the Scalattice agent, or otherwise interact with our services (together, the "Services").
Scalattice is operated by Robottik Ltd, registered in England and Wales (company no. 17193565). If you do not agree with this policy, do not use the Services.
1. Who this policy covers
This policy applies to visitors of our marketing sites, developers and API customers on Scalattice Cloud, GPU providers who connect machines to the network, and people who contact us for support or waitlist access.
2. Information we collect
Account and profile data. Email address, display name, authentication method (magic code or Google sign-in), account preferences, and provider profile details such as payout email and display name.
Authentication and session data. Session cookies (for example slt_session), email verification or magic codes, OAuth exchange codes, and related security events such as token versioning on logout.
Developer and API data. API key metadata (name, prefix, last four characters, status, policy), credit balances, top-up and checkout records, inference usage (model, tokens, cost, timestamps), and routing preferences (region, vetting, security tier).
Provider and agent data. Provider machine keys (hashed), setup codes (short-lived), connection IP (used for approximate region), agent heartbeats, GPU and host specs reported by the agent, enabled models, schedules, completed job counts, and earnings or payout records.
Prompt and output content. To run inference we process prompts and model outputs. Content may be routed to independent provider machines or platform capacity for the duration of a job. We meter usage and may retain limited operational logs. Do not submit data you are not allowed to process.
Payment and billing data. Payments and payouts are processed by Stripe (including Stripe Connect for providers). We receive billing status, amounts, and identifiers needed to credit accounts or pay providers. Card details are handled by Stripe, not stored in full on our servers.
Technical and device data. IP address, browser type, device and OS signals, approximate location derived from IP, request logs, cookies and similar technologies, and diagnostic data from the agent or installers.
Communications. Support emails, waitlist submissions, and other messages you send us.
3. How we use information
We use personal data to:
- Provide, operate, secure, and improve the Services
- Create and administer accounts, authenticate users, and manage sessions
- Route inference jobs, meter tokens, bill credits, and calculate provider earnings
- Mirror and serve model weights to authenticated agents where applicable
- Process payments, refunds where required, and provider payouts
- Detect abuse, fraud, and security incidents; enforce our terms
- Respond to support requests and send operational notices
- Comply with law and respond to lawful requests
4. Legal bases (UK GDPR)
Where UK data protection law applies, we process personal data on these bases: performance of a contract (providing the Services you request); legitimate interests (securing the network, improving reliability, preventing abuse), balanced against your rights; consent where required (for example non-essential cookies or optional marketing); and legal obligation where we must retain or disclose information.
5. Sharing and processors
We do not sell personal data. We share information with:
- Independent GPU providers, who receive job payloads needed to run inference on their machines under our terms
- Infrastructure and hosting providers that run Scalattice Cloud and related systems
- Stripe for payments, credits checkout, and provider payouts
- Email delivery providers for magic codes, receipts, and service mail
- Analytics or cookie tools, only after consent where required
- Professional advisers and authorities when required by law or to protect rights and safety
Some providers operate globally. Where we transfer personal data outside the UK, we use appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or other lawful mechanisms.
6. Retention
We keep account and billing records for as long as your account is active and for a reasonable period afterward for disputes, accounting, and legal requirements. API usage and operational logs are retained for metering, security, and product quality for a limited period. Magic codes, setup codes, and similar secrets expire automatically. Agents store tokens and model weights on the provider's own machine under the provider's control.
7. Security
We use technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS/WSS), hashed API and agent secrets, access controls for internal systems, and isolation of internal APIs from the public internet. No system is perfectly secure. You must protect your passwords, API keys, and provider agent tokens. Revoke credentials you no longer need.
8. Your rights
Under UK data protection law you may have rights to access, correct, delete, or restrict personal data, to object to certain processing, to withdraw consent where processing is consent-based, and to data portability where applicable. You may also complain to the UK Information Commissioner's Office (ICO). To exercise rights, email support@scalattice.com. We may need to verify your identity before acting on a request.
9. Cookies
We use cookies and similar technologies as described in the Cookie Usage Policy below. Essential cookies (including session cookies for Scalattice Cloud) are required for the Services to function. Non-essential tracking cookies (Google Analytics, Microsoft Clarity, and the X advertising pixel) are used only if you accept them in the cookie notice. You can reject non-essential cookies without losing access to the Services.
10. Children
The Services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will take appropriate steps.
11. Third-party links and software
Our sites may link to third parties (for example documentation hosts, GitHub, or payment pages). Their privacy practices are their own. The open-source Scalattice agent runs on provider hardware; providers are responsible for the security of that environment.
12. Changes
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised date. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.
13. Contact
Questions or privacy requests: support@scalattice.com or the Support centre.
Scalattice is operated by Robottik Ltd, registered in England and Wales (company no. 17193565).