Legal
Privacy Policy
Last updated: June 8, 2026
This policy describes how Darelim & GnukuM LLC (doing business as Gnukum Cloud Solutions) handles information when you use enclavai.io, our free browser tools, and related marketing pages.
Who we are
EnclavAI is a product of Gnukum Cloud Solutions. For privacy questions contact info@gnukumcloudsolutions.com. For product support contact support@gnukumcloudsolutions.com.
What this policy covers
This policy applies to the public website and free tools hosted at enclavai.io (and pages we operate on gnukumcloudsolutions.com that link here). It does not govern a self-hosted EnclavAI deployment inside your environment — that instance runs under your policies and authorization boundary.
Information we collect
- Pilot request form. Name, work email, company, optional team size, deployment target, and message. Submitted to our Supabase database so we can respond to your inquiry.
- Email correspondence. If you email us at pilot@enclavai.io or support@gnukumcloudsolutions.com, we receive what you send.
- Website analytics. When enabled, PostHog may collect page views, referring domain, browser/device type, and custom events (for example, pilot form submission). We do not send checklist file content or CUI to analytics.
- Hosting logs. Vercel may process standard web server metadata (IP address, user agent, requested URL) for delivery and security.
What we do not collect
The STIG Readiness Scorer parses your checklist entirely in your browser. Your .ckl, .cklb, XCCDF, SCAP/ARF, or .nessus file is not uploaded to our servers for scoring.
Do not submit Controlled Unclassified Information (CUI), classified data, or export-controlled technical data through the pilot form or public email. Use your organization's approved channels for sensitive material.
How we use information
- Respond to pilot and support requests
- Operate, secure, and improve the public website
- Measure interest in product pages and tools (aggregate analytics)
- Comply with law and protect against abuse
We do not sell your personal information.
Service providers
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Pilot lead storage | Form fields you submit |
| Resend | Email notifications | Pilot lead fields; message delivery metadata |
| Vercel | Website hosting | HTTP logs; static assets |
| PostHog | Product analytics (when enabled) | Usage events; no file content |
Cookies and analytics
We may use cookies or similar technologies for analytics and session measurement when PostHog is enabled. You can limit tracking with browser settings, privacy extensions, or Do Not Track (we honor reasonable browser privacy signals where supported). The STIG scorer does not require cookies to function.
Retention
Pilot requests are kept as long as needed to evaluate and conduct pilots, maintain business records, and follow up on legitimate inquiries. You may request deletion of marketing-site data by emailing info@gnukumcloudsolutions.com with the email address you used on the form.
Security
We use HTTPS, access controls on backend systems, and least-privilege practices appropriate to a small B2B software vendor. No method of transmission or storage is 100% secure. See our Security & Data Handling page for a public summary.
Children
Our services are intended for business and government contracting professionals. We do not knowingly collect information from children under 13.
Changes
We may update this policy. The “Last updated” date at the top will change when we do. Material changes may also be noted on the home page.
Related policies
Website use is also governed by our Terms of Service. The consulting company site at gnukumcloudsolutions.com/privacy hosts an equivalent policy for that domain.