PRIVACY POLICY — SKIDNIR

EFFECTIVE DATE: August 31, 2026 PROVIDER: Adam Matar, an individual and sole proprietor doing business as (d/b/a) Skidnir ("Skidnir", "We", "Us", "Adam Matar") WEBSITE: https://skidnir.com

1. OVERVIEW & SCOPE

Skidnir provides custom private-cloud AI workflow automation, dedicated server container orchestration, and ongoing Site Reliability Engineering (SRE) infrastructure maintenance to commercial business clients.

This Privacy Policy describes how we collect, handle, process, and protect information when you visit our website, interact with our communications (including WhatsApp and Email), or engage our services.

2. STRICT GEOGRAPHIC & REGULATORY LIMITATIONS (NO GDPR / NO CCPA)

IMPORTANT: TERRITORIAL LIMITATION: TDH AI LABS OFFERS SERVICES EXCLUSIVELY TO COMMERCIAL BUSINESSES OPERATING WITHIN THE UNITED STATES UNDER STANDARD US COMMERCIAL LAW.

1. No European Union (GDPR / UK GDPR) Personal Data: TDH AI Labs does NOT market to, offer services to, or target individuals located in the European Economic Area (EEA), European Union, or United Kingdom. We do NOT knowingly collect or process personal data subject to the EU General Data Protection Regulation (GDPR) or UK GDPR. Clients are strictly prohibited from submitting EU/UK data subject information through our systems. 2. No California (CCPA / CPRA) Consumer Personal Data: TDH AI Labs operates exclusively on a Business-to-Business (B2B) commercial basis. We do NOT collect, sell, share, or monetize consumer personal information subject to the California Consumer Privacy Act (CCPA) or California Privacy Rights Act (CPRA). 3. No Protected Health (HIPAA) or Regulated Data: We do NOT collect or store Protected Health Information (PHI) under HIPAA, payment card numbers subject to PCI-DSS, or classified/defense data under ITAR.

3. INFORMATION WE COLLECT & DUAL-PLANE ARCHITECTURE

A. Information You Provide Directly

Commercial Inquiries & Contact Details: When you contact us via WhatsApp, SMS, web form, or email, we collect your name, business email, company name, phone number, software stack details, and operational requirements.

Billing Information: Payments are processed directly through our PCI-compliant payment provider (Stripe, Inc.). TDH AI Labs does NOT store or have access to your full credit card numbers or banking passwords.

B. Client Workflow Data (Dual-Plane Processing Architecture)

Dedicated Local Storage Plane: When we deploy dedicated private server instances, your core databases, operational credentials, and workflow configurations remain strictly isolated on your dedicated server.

Inference Transit Plane: When automated workflows utilize external foundational AI models, sanitized text prompts and payload data transit via encrypted Transport Layer Security (TLS 1.3) directly to the respective third-party API endpoint. Client acts as the independent Data Controller for all data submitted to automated workflows.

4. HOW WE USE YOUR INFORMATION & ARTIFICIAL INTELLIGENCE DISCLOSURES

We use commercial information strictly to: 1. Provide, engineer, stage, and maintain custom workflow automation architectures. 2. Communicate with you regarding project milestones, technical architecture, and system health. 3. Process payments and issue milestone invoices via Stripe. 4. Maintain container uptime and error monitoring under our SRE retainer.

A. AI Model Training & Data Practices

TDH AI LABS AND VIBEHARD DO NOT SELL, RENT, OR MONETIZE CLIENT DATA TO THIRD PARTIES FOR ADVERTISING PURPOSES. WE DO NOT DELIBERATELY HARVEST CLIENT DATA TO TRAIN PUBLIC COMMERCIAL FOUNDATION MODELS. HOWEVER, ALL SERVICES ARE PROVIDED "AS-IS" AND WITHOUT WARRANTIES OR COVENANTS OF ANY KIND. WE EXPRESSLY DISCLAIM ANY AFFIRMATIVE GUARANTEES OR REPRESENTATIONS REGARDING THE INDEPENDENT TECHNICAL ACTIONS, DATA INGESTION, OR INTERNAL PROCESSES OF UNAFFILIATED THIRD-PARTY INFRASTRUCTURE OR MODEL PROVIDERS.

B. Anton Scoping Chat & Technical Operations

When interacting with our conversational systems (such as Anton on skidnir.com or development pipelines on vibehard.ai):

Transient Session Execution: Conversations with Anton and code synthesis operations execute in ephemeral memory solely for multi-turn conversational routing.
Hardware & Infrastructure Disclaimers: All virtual server instances and computing resources are provisioned through third-party vendors and are not owned by Provider or Client. Provider makes zero warranty regarding third-party hardware availability or security.
Ownership Distinction: Clients retain ownership solely over their own pre-existing data and customer records ("Client Data"). Client does not acquire or own any workflows, JSON files, software code, orchestration schemas, or system architectures developed, configured, or hosted by Provider.

5. THIRD-PARTY SERVICE PROVIDERS & UPSTREAM AI DISCLAIMER

We rely on trusted, independent, third-party technology providers to operate our business:

Payment Processing: Stripe, Inc. (PCI-DSS Level 1 certified).
Cloud Infrastructure & Telecommunications: Independent cloud computing vendors, DNS routing networks, and telecommunication carriers.
Third-Party Foundation AI APIs: External foundation model providers.

LEGAL DISCLAIMER REGARDING UPSTREAM AI APIS AND THIRD-PARTY INFRASTRUCTURE:
TDH AI Labs and VibeHard utilize third-party cloud infrastructure and upstream foundation artificial intelligence model Application Programming Interfaces (APIs) provided by entities entirely unaffiliated with us, including without limitation OpenAI LLC, Google LLC, Anthropic PBC, and DeepSeek AI. Upstream API calls and data transmissions routed to such external providers are governed exclusively by the independent terms of service, privacy policies, data handling practices, and security disclosures of those respective third-party companies.

TDH AI LABS MAKES NO REPRESENTATIONS, WARRANTIES, COVENANTS, OR GUARANTEES ON BEHALF OF ANY THIRD-PARTY PROVIDER. WE DO NOT CONTROL, AUDIT, DICTATE, OR ASSUME LIABILITY FOR WHAT THIRD-PARTY AI PROVIDERS ACCESS, RETAIN, LOG, INSPECT, OR DO WITH DATA TRANSMITTED VIA THEIR APIS. CLIENT EXPRESSLY ACKNOWLEDGES AND AGREES THAT PROVIDER SHALL HAVE ZERO LIABILITY ARISING FROM OR RELATED TO THE ACTIONS, OMISSIONS, DATA BREACHES, DATA PROCESSING PRACTICES, OR REGULATORY NON-COMPLIANCE OF ANY UNAFFILIATED THIRD-PARTY AI PROVIDER OR HOSTING VENDOR.

6. DATA SECURITY & RETENTION

We implement defensive engineering practices including TLS 1.3 encryption in transit, isolated private virtual server environments, SSH key access controls, and rate-limiting safeguards. We retain commercial relationship records only for as long as necessary to fulfill contractual obligations and comply with applicable US tax and accounting regulations.

7. GOVERNING LAW & DISPUTE RESOLUTION

This Privacy Policy and all matters arising out of the use of our services shall be governed by and construed in accordance with the laws of the State of Oregon, United States, without regard to conflict of law principles. Any dispute shall be resolved through confidential, binding individual arbitration administered by the American Arbitration Association (AAA).

8. CONTACT INFORMATION

For any privacy questions or notices regarding this policy:

Provider: Adam Matar d/b/a Skidnir

Email: adam@skidnir.com (or via WhatsApp: +1 877 916 3440)

Website: https://skidnir.com