Radiance Cloud Privacy Policy

Last updated: December 3, 2025

Introduction

This privacy policy ("Privacy Policy") explains how Radiance Cloud AB, a Swedish company ("Radiance Cloud", "Company", "we", "us", or "our"), collects, uses, and safeguards data when you ("you" or "your") use our services, visit our websites such as https://radiance.cloud/ (the "Website"), access our application programming interfaces ("APIs"), or use any other services we provide (together, the "Services").

This document sets out what kinds of information we gather from you or that you submit while using the Services, and how we handle, store, protect, and share that information. Terms that are capitalized but not defined here have the meanings given to them in our Terms of Service available on our Website.

By accessing or using the Services, you consent to the practices described in this Privacy Policy. If we make material updates to this Privacy Policy, we will inform you accordingly.

Data handled by our APIs

When you send inputs to our APIs and receive outputs from our models, those inputs and outputs may contain Personal Information. We do not store, sell, or use this content to train models unless you provide explicit consent for such use. In limited cases, we may temporarily retain inputs and outputs for purposes such as caching or debugging, and only for as long as necessary to provide and improve the Services.

Information we collect and how we collect it

We collect different categories of information about users of our Services, including:

Personal Information

Account information. When you register an account with us, we collect personal details such as your name and email address ("Personal Information").
Communication information. When you interact with us—for example, by requesting information about our Services, communicating with our sales or support teams, completing surveys, submitting feedback, posting comments, registering for events, or participating in marketing campaigns—we collect the information you choose to share ("Communication Information"). We may maintain records of these communications and related details.

Other information and automatically collected data

Device information. We collect technical information that does not directly identify you, such as your internet connection, the device and browser you use to access the Services, and related configuration details ("Other Information"). This information helps us improve and optimize the Services.
Usage data. We collect behavioral data on how you use the Services, such as which pages you visit, how long you stay on a page, and your navigation patterns.
Log data. When you interact with the Services, your browser or device sends information that we log, including your IP address, request timestamps, and how you interact with features of the Services.

This information enables us to maintain, secure, and enhance the Services and deliver a more tailored user experience. We use technologies such as cookies and web beacons to support this automatic data collection.

We obtain information:

Directly from you when you submit it to us.
Automatically as you browse or use the Services, including via cookies and similar technologies that record usage information and IP addresses.
From third parties, such as business partners or service providers that support our operations.

Information you actively provide

The information you provide to us via the Services may include:

Content and data you submit when using the Services, including any Submissions.
Information entered into forms on the Website, such as when you register for an account, subscribe to a plan, request additional Services, or report an issue.
Information you share when you contact us directly, for example by email or through support channels.
Transaction details for orders placed through the Services. Payments are processed by Stripe, and you may be asked to supply payment-related information to complete a purchase.

Automatically collected data and associated practices

We do not, by default, collect Personal Information solely through automated means. However, we may link automatically collected non-personal data with Personal Information that we receive from you or from other sources, where legally permitted.

We do not perform automated decision-making or profiling that produces legal or similarly significant effects. Your data may be transferred, stored, and processed within the EU/EEA where possible, and where data is transferred outside the EU/EEA, we apply appropriate safeguards consistent with GDPR requirements, such as approved transfer mechanisms and contractual protections.

How we use your information

We use the information we collect from and about you, including Personal Information, for the following purposes:

To operate, present, and maintain the Services and related content.
To deliver the information, products, and Services that you request from us.
To send you account-related notifications, including expiration, renewal, and service-status messages.
To meet our contractual obligations and enforce our rights under agreements with you, including billing, payment processing, and collections.
To inform you about updates or changes to the Services or to products and Services we make available.
For purposes that we describe at the time you provide your information.
For any additional purposes for which you have given your consent.
To personalize your experience, including providing recommendations or content tailored to your browsing behavior.

Disclosure of your information

We may share aggregated or anonymized information about our users, which does not identify any individual, without restriction.

We only disclose Personal Information as described in this Privacy Policy and as necessary to provide and operate the Services. We do not retain such Personal Information longer than needed for these purposes.

When you use specific models or integrations through our APIs, the Personal Information and other data you submit may be transmitted to the relevant third-party or downstream API endpoints, as described at the point of use.

We may also disclose your Personal Information:

When required to comply with applicable laws, legal processes, or lawful requests from authorities, including the Swedish Authority for Privacy Protection (IMY) and other competent regulators.
To enforce our Terms of Service and other agreements, including for invoicing, collections, and dispute resolution.
When we consider it necessary to protect the rights, property, or safety of the Company, our customers, or others, including exchanging information with other organizations for fraud prevention and credit risk mitigation.

Your choices about use and disclosure

We aim to give you meaningful control over how your Personal Information is used:

Cookies and similar technologies. You can configure your browser settings to block some or all cookies, or to alert you when cookies are being set. If you choose to block cookies, certain parts of the Website or Services may not work correctly or may become inaccessible.
Marketing communications. From time to time, we may send you marketing emails or similar communications about our Services, consistent with your choices. You can opt out at any time by following the unsubscribe instructions included in those communications or by contacting us at [email protected]. Even if you opt out of marketing messages, we may still send important transactional or service-related notices, such as updates regarding your account, subscriptions, security alerts, or critical service announcements.

Residents in the EU/EEA, including Sweden, have additional rights and controls over their Personal Information. For details, see “Your GDPR Rights” below.

Accessing, updating, and deleting your information

You can access, review, update, or remove certain Personal Information directly by logging into your account and visiting your profile or account settings.

You may also contact us at [email protected] to request access to, correction of, restriction of processing of, transfer of, or deletion of your Personal Information. In some cases, fulfilling such a request may require closing and deleting your user account. We may decline requests where executing the change would violate applicable law, regulatory requirements, or cause data to become inaccurate or misleading.

Your GDPR rights

As a controller established in Sweden, we process Personal Information in line with the General Data Protection Regulation (GDPR). If you are located in the EU/EEA, you may exercise the following rights regarding your Personal Information:

Right of access. Request confirmation of whether we process your Personal Information and, if so, obtain a copy of that data.
Right to rectification. Ask us to correct or complete Personal Information that is inaccurate or incomplete.
Right to erasure. Request deletion of your Personal Information in situations where GDPR allows it (for example, where data is no longer needed for the original purpose or where you withdraw consent and there is no other legal basis for processing).
Right to restriction. Request that we limit our processing of your Personal Information in specific circumstances.
Right to data portability. Receive your Personal Information in a structured, commonly used, and machine-readable format and transmit it to another controller where technically feasible.
Right to object. Object at any time to processing based on our legitimate interests, and object to processing for direct marketing.
Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing prior to withdrawal.
Right to lodge a complaint. You may submit a complaint to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) if you believe our processing of your Personal Information infringes GDPR. Further information is available on IMY’s website at https://www.imy.se/.

To exercise any of these rights, please contact us at [email protected]

Data retention

We retain the Personal Information described in this Privacy Policy for as long as you maintain an account or otherwise use the Services, as needed to fulfill the purposes for which it was collected, and as required or permitted by applicable laws (including Swedish accounting and tax regulations). Once your account is deleted, we aim to remove or anonymize your Personal Information within 30 days, unless a longer retention period is mandated or allowed by law.

Data security

We use a combination of technical and organizational measures, aligned with frameworks such as SOC 2 and ISO 27001, to help protect Personal Information and support GDPR-compliant processing. These measures are designed to safeguard your data against accidental loss and against unauthorized access, use, alteration, or disclosure. Data you provide is stored on secure servers protected by firewalls, and payment transactions are encrypted in transit.

Despite these safeguards, no system can be completely secure. Accordingly, we cannot guarantee absolute security of your information.

Your own security practices also play an important role. Where you use a password to access any part of the Services, you are responsible for keeping that password confidential and not sharing it with others.

International data transfers

Your data may be processed and stored within the EU/EEA. Where Personal Information is transferred to countries outside the EU/EEA, we will ensure that such transfers comply with GDPR, for example by using Standard Contractual Clauses or other approved transfer mechanisms and safeguards.

Changes to this Privacy Policy

If we significantly change how we process your Personal Information, we will notify you, for example by sending an email to the address associated with your account or by posting a prominent notice on the Services. The “Last updated” date at the top of this document indicates when the Privacy Policy was most recently revised. You are responsible for keeping your contact details up to date and for reviewing this Privacy Policy periodically.

Contact information

If you have questions, concerns, or comments about this Privacy Policy or our data protection practices, you can contact us at:

Email: [email protected]

Postal address:
Radiance Cloud AB
Laxåvägen 66
128 44 Stockholm
Sweden

Supervisory authority:
Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY)
More information is available at https://www.imy.se/.