Privacy Policy

Last updated: July 27, 2026

This Privacy Policy describes how Transient.AI Inc. ("Transient.AI," "we," "us," or "our"), a Delaware corporation headquartered in New York, NY, collects, uses, and shares information in connection with our website at transient.ai and our software products, including DAF Studio (collectively, the "Services").

We designed DAF Studio with a privacy-first architecture: customer workflow content is processed in real time and is not retained by Transient.AI beyond the duration required to complete the requested operation. This Policy explains what that means in practice and what limited categories of information we do collect and retain.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly, such as when you create an account, subscribe through the Microsoft Azure Marketplace, contact us for support, or otherwise communicate with us. This includes your name, business email address, company name, job title, and any messages or attachments you send us.

1.2 Account and Subscription Information

When you subscribe to DAF Studio through the Microsoft Azure Marketplace, Microsoft shares with us a limited set of subscription metadata (subscription identifier, plan identifier, Azure tenant identifier, purchaser email, quantity, and lifecycle status). Payment processing is handled by Microsoft; we do not receive your credit card or bank account details.

1.3 Usage and Operational Data

We collect operational telemetry necessary to deliver, secure, and improve the Services, including log data (timestamps, request metadata, response codes), performance metrics, error reports, and high-level usage patterns (for example, which declarative workflows are invoked). This data does not include the content of your workflows.

1.4 Customer Content — Zero Retention

"Customer Content" means the inputs you submit to DAF Studio (including documents, prompts, structured data, and any materials you incorporate into a declarative workflow) and the outputs produced by the Services on your behalf. Customer Content is processed ephemerally: it is held in memory and transient storage only for the duration required to execute the requested operation, and is not persisted to our long-term systems, used to train any model, or retained after the operation completes. This is a contractual commitment, not solely a representation.

1.5 Website Information

When you visit transient.ai, we may collect standard web-server logs (IP address, user-agent, referrer, pages requested, timestamps) and information from cookies or similar technologies used for essential site functionality and aggregate analytics. You can disable non- essential cookies through your browser settings without affecting core site functionality.

2. How We Use Information

We use the information described above to:

Provide, maintain, secure, and operate the Services;
Authenticate users and manage subscriptions;
Respond to support requests and communicate service updates;
Detect, investigate, and prevent fraud, abuse, and security incidents;
Improve the reliability, performance, and functionality of the Services (using operational telemetry only, not Customer Content);
Comply with legal obligations, enforce our terms, and protect our rights and the rights of others.

3. How We Share Information

We do not sell personal information. We share information only as described below:

3.1 Infrastructure and Service Providers

We use Microsoft Azure as our primary cloud infrastructure provider. Azure processes information on our behalf under Microsoft's commercial terms, including the Microsoft Online Services Data Protection Addendum. Because DAF Studio is model-agnostic, execution of a workflow may route prompts and responses to third-party AI model providers that you have configured or authorized (for example, Microsoft Azure OpenAI Service, Anthropic, or other providers selected at your tenant's discretion). Transient.AI does not transmit Customer Content to model providers that you have not authorized.

3.2 Microsoft Azure Marketplace

For subscriptions obtained through the Azure Marketplace, Microsoft acts as the merchant of record for billing, taxation, and subscription lifecycle events. Microsoft's own privacy and terms govern that relationship in addition to this Policy.

3.3 Legal and Safety

We may disclose information when required by valid legal process, when necessary to protect the rights, property, or safety of Transient.AI, our customers, or others, or in connection with a merger, acquisition, financing, or sale of assets (in which case we will require the recipient to honor the commitments in this Policy).

4. International Data Transfers

Transient.AI is based in the United States. If you access the Services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where we or our service providers operate. We rely on standard contractual clauses and other lawful transfer mechanisms where required.

5. Data Retention

We retain account and subscription information for as long as your subscription is active and for a reasonable period thereafter (not to exceed 12 months) to meet legal, tax, audit, and dispute-resolution obligations. Operational logs are retained for up to 90 days for security and reliability purposes. Customer Content is not retained beyond the duration of each operation, as described in Section 1.4.

6. Security

We implement administrative, technical, and physical safeguards designed to protect information under our control, including encryption in transit, access controls, audit logging, and least-privilege principles. No system is perfectly secure, and we cannot guarantee the security of information transmitted to or from the Services.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing or withdraw consent. Residents of the European Economic Area, the United Kingdom, and certain U.S. states (including California under the CCPA/CPRA) have specific rights under applicable law. To exercise these rights, contact us at stevek@transient.ai. We will respond within the timeframes required by applicable law.

8. Children

The Services are not directed to individuals under 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take appropriate steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page and, where appropriate, by notice through the Services or by email to account administrators. Your continued use of the Services after an update indicates acceptance of the revised Policy.

10. Contact

Questions about this Privacy Policy or our privacy practices should be directed to stevek@transient.ai.