Privacy Policy

This policy describes how Fractal Machine Research, Inc. (“Belvedir,” “we,” “us”) collects, uses, and shares information when you visit our websites or use the Belvedir platform, SDKs, and APIs (the “Services”).

Two roles matter here. For account and website information, we act as a data controller. For trace and telemetry data that our customers’ applications send to the platform, we act as a processor on the customer’s behalf — if your data appears in a customer’s traces, that customer controls it, and requests about it should go to them.

Information you provide — account details (name, email, authentication credentials), instance and API key configuration, benchmark and optimizer settings (such as repository URLs), and anything you send us directly.

Trace and telemetry data — when you instrument an application with our SDKs, it sends OpenTelemetry spans to the platform. These can include prompts, model completions, tool inputs and outputs, model names, token counts, and timing. The content of this data is determined by you and your application; do not send data you are not permitted to share.

Automatically collected — standard log and device information such as IP address, browser type, pages viewed, and timestamps, used for security and to operate the Services.

• to provide the Services: link traces into sessions, segment sessions into tasks, group similar tasks, run benchmarks, and generate optimization proposals;
• to secure accounts, prevent abuse, and debug issues;
• to communicate with you about the Services;
• to comply with legal obligations;
• to improve the Services, using aggregated or de-identified information.

We do not use your data to train our own or third-party foundation models without your explicit opt-in, we do not sell personal information, and we do not use trace content for advertising.

We share data only with service providers that process it on our behalf to run the platform — hosting, database and authentication, trace processing infrastructure, sandboxed execution environments, model inference and embedding providers, and source-control services you choose to connect. These providers are bound by agreements that limit their use of your data to providing services to us, and our agreements with model providers exclude your data from model training.

We may also disclose information if required by law, to protect rights and safety, or as part of a merger, acquisition, or sale of assets (with notice).

We use cookies necessary to operate the Services — chiefly authentication session cookies. We do not use advertising or cross-site tracking cookies.

We use technical and organizational safeguards including encryption in transit, hashed API keys (raw keys are shown once and never stored), row-level access controls, and secret redaction in logs. No system is perfectly secure; we will notify affected customers of a breach without undue delay.

We keep personal information only as long as needed for the purposes above, legal compliance, and dispute resolution. Trace data is retained while your account is active or as your agreement with us specifies; you can request deletion of your account and associated data at any time.

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information, and to object to certain processing. California residents have the rights provided by the CCPA/CPRA (we do not sell or share personal information as those laws define it). Individuals in the EEA, UK, and Switzerland have the rights provided by the GDPR, including the right to complain to a supervisory authority. To exercise any right, email us at founders@fractalresearch.ai; we will respond within the time required by applicable law.

We are based in the United States and process data there. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

The Services are not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this policy from time to time. Material changes will be posted here with an updated “Last updated” date, and we will make reasonable efforts to notify active customers.

Privacy questions and requests: founders@fractalresearch.ai.