Privacy Notice

1. Who we are

Infer Street is operated by Tesseract FinTech Limited, a company registered in the Dubai International Financial Centre (DIFC) ("Infer Street", "we", "us", or "our"). We run a marketplace that connects people who need AI inference with the providers who supply it, and we publish market information about it. We are responsible for the personal information we handle as described in this notice — in data protection terms, we are the "controller" of that information.

2. About this notice

This notice applies to the Infer Street website, the Developer Portal (where buyers manage their usage), and the Token Exchange portal (where sellers list what they offer and where anyone can view market information), along with the underlying marketplace and routing services that make these work.

It applies to anyone, anywhere in the world, who uses these services. It does not cover any internal demo or testing environment we use to illustrate features, and it does not cover other companies' services that you reach through links or that you choose to connect — those have their own privacy notices.

3. Who this notice is for

This notice is for everyone who interacts with Infer Street, including:

• Buyers (developers) — people and businesses who use the Developer Portal to obtain AI inference.
• Sellers (AI providers) — people and businesses who use the Token Exchange portal to offer inference for sale.
• Visitors — anyone who browses our website or views our public market information.

4. The personal information we collect

The information we collect depends on how you use Infer Street. It may include:

• Account information — such as your name, email address, sign-in details, and the organisation you represent.
• Seller payout information — for sellers, the details we need to pay you for the inference you supply.
• Billing and payment information — such as top-ups, balances, transactions, taxes, and limited payment details (full card details are handled by our payment provider, not stored by us).
• Usage information — such as the access keys you create, the requests routed on your behalf, how much you use, and the charges that apply. We use this to operate the marketplace, route requests, and meter and settle payments.
• Technical information — such as your IP address, device and browser type, and log records created when you use our sites and apps, used to keep the service secure and working.
• Messages you send us — such as support or other enquiries, and our replies.

5. How we use your information

We use personal information to:

• Provide and operate the marketplace — including creating your account, routing requests to a provider, and metering usage.
• Handle payments — taking top-ups, charging for usage, paying sellers, and keeping accurate records.
• Keep the service secure — preventing fraud and abuse, and protecting accounts, systems, and users.
• Support you — answering your questions and resolving issues.
• Improve the service — understanding how it is used so we can make it better and more reliable.
• Meet our legal and regulatory obligations — such as tax, accounting, and other legal requirements.

6. Our legal bases for using your information

We only use your personal information when we have a proper reason to do so under applicable data protection law — in particular the Data Protection Law of the Dubai International Financial Centre (DIFC Law No. 5 of 2020). Depending on the situation, our reasons are:

• To perform our contract with you — for example, to give you an account and provide the service you have signed up for.
• To meet a legal obligation — for example, to keep financial records or respond to lawful requests.
• For our legitimate interests — for example, to keep the service secure, prevent abuse, and improve what we offer, in a way that is balanced against your rights.
• With your consent — where we ask for it, such as for any optional communications. You can withdraw consent at any time.

7. Automated decisions

We route your requests to a provider automatically so they can be fulfilled quickly. We do not make decisions that produce legal effects about you, or that significantly affect you in a similar way, based solely on automated processing, and we do not profile you in that way. If this ever changes, we will tell you and explain the choices you have.

8. Sharing your information

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We share it only where it is needed to run the service or where we are required to, including with:

• AI providers (sellers) — when we route a request to a provider to fulfil it, so they can supply the inference you asked for.
• Payment providers — to process top-ups, charges, and payouts.
• Hosting, infrastructure, and technology providers — who help us run the service securely on our behalf.
• Professional advisers — such as auditors and lawyers, where reasonably needed.
• Authorities and others — where we are required by law, to respond to a lawful request, or to protect our rights, users, or the public.
• A successor — if our business is reorganised, merged, or sold, in which case information may transfer as part of that change.

9. Public market information

The market information shown on the Token Exchange portal is aggregated and presented so that it does not identify you. Listing inference for sale makes the related market information public, but it is not intended to reveal the personal identity of individual buyers.

10. International transfers

Infer Street operates from the Dubai International Financial Centre (DIFC), and the providers we work with may be located in other countries. This means your information may be transferred to and processed outside the place where you are based, in countries whose laws may offer a different level of protection. Where this happens, we take appropriate steps to make sure your information stays protected in line with applicable data protection law.

11. How long we keep your information

We keep personal information for as long as your account is active and for as long as we need it to provide the service. After that, we keep it only for as long as necessary to meet legal, tax, accounting, security, and dispute-resolution needs, and then we delete or anonymise it.

12. How we protect your information

We use appropriate technical and organisational measures to protect personal information against loss, misuse, and unauthorised access. These include access controls, encryption in transit, and limiting who can see your information to those who need it. No service can be completely secure, so we also ask you to help by keeping your sign-in details and access keys safe.

13. Cookies and analytics

Our marketing website does not use advertising or tracking cookies, and it does not run third-party analytics.

The Developer Portal and the Token Exchange portal use essential cookies that are needed to sign you in and keep your session secure. Without these, those apps cannot work properly.

14. Marketing and your choices

If we send you marketing or promotional messages, we will only do so where we are allowed to, and you can opt out at any time — for example by using the unsubscribe link in an email or by contacting us. Even if you opt out of marketing, we may still send you service or transactional messages that are needed to operate your account, such as security alerts, billing notices, and important changes to the service.

15. Other websites we link to

Our website and portals may contain links to websites and services operated by other companies. We are not responsible for the content or the privacy practices of those sites. If you follow a link to another site, we encourage you to read its own privacy notice.

16. Your privacy rights

Subject to applicable law, you have rights over your personal information, which may include:

• Access — to ask for a copy of the information we hold about you.
• Correction — to ask us to fix information that is wrong or incomplete.
• Deletion — to ask us to delete your information in certain circumstances.
• Restriction or objection — to ask us to limit or stop certain uses of your information.
• Portability — to ask for certain information in a portable format.
• Withdrawing consent — where we rely on your consent, you can withdraw it at any time.

17. Exercising your rights and complaints

You can exercise your rights, or ask any questions about your privacy, by contacting us using the details below. We may need to confirm your identity first. We will respond as soon as we can and, in any event, within the time required by law (usually within one month). This is normally free, although we may charge a reasonable fee where a request is excessive or repetitive, to the extent allowed by law.

We will not deny you services, change your prices, or reduce the quality of your service simply because you have exercised your privacy rights, except where the law allows it.

If you are not satisfied with how we have handled your information, you have the right to complain to the Commissioner of Data Protection at the Dubai International Financial Centre. You can reach the Commissioner's office at the Dubai International Financial Centre Authority, Level 14, The Gate Building, Dubai, UAE; by phone on +971 4 362 2222; or by email at commissioner[at]dp.difc.ae.

18. Children's privacy

Infer Street is intended for businesses and adults, and is not directed at children. Anyone under the age of 18 should only use Infer Street under the supervision of a parent or guardian. We do not knowingly collect personal information from children, and if you believe a child has provided us with personal information, please contact us so we can remove it.

19. Changes to this notice

We may update this notice from time to time — for example, to reflect new features or legal requirements. When we do, we will post the updated version here and change the effective date at the top. If the changes are significant, we will take reasonable steps to let you know.

20. How to contact us

If you have any questions about this notice, want to exercise your privacy rights, or wish to make a complaint about how we handle your personal information, you can reach us in more than one way:

• By email: dp[at]inferstreet.com
• By post: Tesseract FinTech Limited, Level 3, Dubai AI Campus, Innovation One, DIFC, Dubai, UAE