Privacy Policy

1. What we collect

Account: your username, email address, password (stored only as a secure hash) and, if you sign in with Google or GitHub, the identifier and email address they send us. If you add them: display name, bio and profile picture.

Payments: Stripe handles card payments and payouts. We never see or store your full card number. We store the amounts, dates and status of your purchases, rentals, earnings and cash-outs. For payouts, Stripe collects your identity and bank details under its own privacy policy, and we store the Stripe account identifier and whether payouts are enabled.

Rentals: which GPU you rented, when, for how long, what it cost, and how many tokens your requests used. We do not store the text of your requests or the answers.

Providers' machines: the GPUFlow agent reports the machine's GPU model, memory, temperature, load and power use, the installed AI models, the operating system and its version, speed measurements and the machine's IP address.

Support and reviews: the messages you send us, and the ratings, comments and replies you post.

Technical data: when you visit, our servers and Cloudflare receive your IP address and browser details. We use your IP address for a short time to limit abuse of the sign-up and sign-in forms.

2. Cookies and similar storage

We use a session cookie to keep you signed in, and cookies named lng and i18next to remember your language. Your browser also stores your light or dark theme and your last marketplace filters. We do not use advertising cookies.

We measure visits with Rybbit, an analytics tool we host ourselves. It records the pages viewed, the referring site, the browser and device type and the approximate country. The sign-up and sign-in forms may use Cloudflare Turnstile to check that you are not a bot.

3. How we use it

To run your account and the marketplace, to process payments, rentals, earnings and cash-outs, to send you the emails and notifications you need (for example, that your GPU was rented or a cash-out was sent), to answer support requests, to prevent fraud and abuse, to improve the service, and to meet our legal and tax obligations.

If you are in the European Economic Area or the UK, we rely on these legal grounds: performing our contract with you, our legitimate interest in running a safe and working service, and compliance with the law.

4. Who sees it

Other users see what is public: your username, profile, listings and reviews. A provider sees the username of a renter who rented their GPU, and the renter's requests and answers pass through the provider's computer while the rental runs.

Service providers that work for us: Stripe (payments and payouts), Cloudflare (network, security and Turnstile) and our email provider. They may only use the data to provide their service to us.

Authorities, when the law requires it, or when needed to protect users or GPUFlow from fraud or harm.

A buyer or successor, if GPUFlow is sold or merged; this policy would continue to apply to your data.

We do not sell your personal information and do not share it for advertising.

5. How long we keep it

We keep your account data while your account is open. When you ask us to close it, we delete or anonymize your personal data, except records of payments, rentals and earnings, which we keep as long as tax and accounting law requires, and information we need to settle a dispute or prevent fraud.

6. Your rights

You can see and change most of your information on your dashboard. You can also ask us for a copy of your data, to correct it, to delete it, or to stop or limit a use of it. Email [email protected] from the address on your account. We answer within 30 days.

If you are in the EEA or the UK, you may also complain to your local data protection authority. Wherever you live, we will not treat you differently for using your privacy rights.

7. Security

We use encrypted connections, hash passwords and limit access to personal data to what is needed to run GPUFlow. No system is perfectly secure, so please use a strong, unique password.

8. International transfers

GPUFlow is run from the United States, and your data is processed there and by our service providers where they operate. When you rent a GPU, your requests go to the provider's computer, which may be in another country.

9. Children

GPUFlow is not for anyone under 18, and we do not knowingly collect data from children. If you believe a child has an account, tell us and we will delete it.

10. Changes

If we change this policy in a way that matters, we will tell you by email or on the site before the change applies.