Privacy Policy

1. Introduction & Scope

This comprehensive Privacy Policy governs the data operations of MinerAI, a cloud-native spatial intelligence platform engineered and operated by Xuremi Inc. ("we", "us", or "our"). As a foundational infrastructure layer for Earth observation, our systems process massive volumes of multi-spectral telemetry, optical satellite imagery, and user-generated geospatial annotations.

We recognize that in the domain of geospatial intelligence, data sovereignty, privacy, and security are not merely compliance checkboxes—they are mission-critical operational requirements. This document transparently outlines the exact parameters under which we collect, store, process, and protect your information when you interface with our APIs, user dashboards, and machine learning pipelines.

2. Categorization of Collected Information

Our infrastructure minimizes data collection strictly to what is required to provision secure, high-speed inference. We categorize collected data into the following distinct operational tiers:

• Identity & Access Vectors: When you initialize a workspace, we collect your given name, surname, institutional or corporate email address, and securely hashed authentication keys. We do not store plaintext passwords.
• Professional & Organizational Context: To tailor our infrastructure scaling and rate-limiting, we collect metadata regarding your primary analytical domain (e.g., Regulatory Compliance, Academic Research, Agribusiness), organizational affiliation, and intended deployment scale.
• Geospatial Input Data: To perform our core service, we must process the precise geographical parameters you submit. This includes longitudinal and latitudinal bounding boxes, specific coordinate markers, manual polygon annotations, and user-uploaded GeoJSON payloads.
• Telemetry & System Logs: We continuously monitor the health of our GPU clusters. To this end, we log incoming IP addresses, API request headers, user agent strings, inference latency metrics, and timestamped access logs.

3. Purpose and Utilization of Data

We deploy your data across our systems exclusively for the following operational imperatives:

• Pipeline Execution: Translating your geospatial coordinates into API calls to satellite providers (e.g., Sentinel-2) and passing those imagery streams through our semantic segmentation networks.
• Security & Rate Limiting: Utilizing identity vectors and IP logs to prevent distributed denial-of-service (DDoS) attacks, mitigate scraping, and enforce API quota constraints across different user tiers.
• Algorithmic Optimization: We aggregate anonymized, non-identifiable inference telemetry to evaluate model accuracy, measure signal-to-noise ratios, and optimize the overarching neural network architecture deployed across our servers.
• Communications: Dispatching critical system alerts, maintenance schedules, API deprecation notices, and responding to direct technical support inquiries.

4. Data Sovereignty and Tenant Isolation

We architect our storage arrays with absolute respect for data sovereignty. When you define a custom geographical region of interest or train a specialized model, that data remains strictly within your tenant boundary.

Ephemeral Processing: Base satellite imagery fetched during an active scan is processed in volatile memory (RAM/VRAM) and is purged post-inference unless you explicitly request the platform to cache the GeoTIFFs for your workspace.

Persistent Artifacts: Inference results (e.g., generated masks, extracted coordinates, and statistical models) are encrypted at rest using AES-256 and stored in secure, regionalized databases. Xuremi Inc. categorically refuses to sell, lease, or monetize your specific geospatial intelligence outputs to third-party data brokers, advertising networks, or unauthorized state actors.

5. Sub-processors and Third-Party Interfacing

MinerAI operates as an integration hub. To function, our backend must securely communicate with vetted third-party sub-processors:

• Imagery Providers: We transmit only the necessary coordinate bounding boxes to partners like Sentinel-2 to retrieve raw optical data. We do not transmit your user identity or email to these providers.
• Model Hubs: For users leveraging custom AI models, we interact with Hugging Face using secure API tokens. Inference processing utilizing these weights happens entirely on our isolated compute nodes.
• Cloud Infrastructure: Our core databases and GPU instances are hosted on enterprise-grade cloud providers (such as DigitalOcean and AWS) which maintain SOC 2 and ISO 27001 compliance.

6. Cryptographic Security Standards

We deploy defense-in-depth security methodologies. All traffic flowing between your local client and our REST APIs is encrypted via TLS 1.3. User passwords are salted and hashed utilizing bcrypt before ever touching a storage disk. Our internal service-to-service communication occurs over isolated Virtual Private Clouds (VPCs).

Despite these rigorous protocols, no internet-connected infrastructure is mathematically immune to intrusion. By utilizing MinerAI, you acknowledge the inherent risks associated with cloud-native data processing.

7. Data Retention and Deletion Rights

We retain your account data and saved workspaces only for as long as your account remains active. Upon written request, we will initiate a complete cryptographic wipe of your identity vectors, API keys, and persistent geospatial artifacts from our primary databases within 30 days. Note that anonymized telemetry data, stripped of all personal identifiers, may be retained indefinitely for long-term algorithmic research.

8. Contacting the Data Protection Officer

If you require clarification on our data routing policies, or if you need to formally invoke your rights under GDPR, CCPA, or regional privacy frameworks, please direct your correspondence to our Data Protection team at muri7hikelvin@gmail.com. We mandate a 48-hour response protocol for all privacy-related inquiries.