Effective date: 1 August 2026 · FALCONS.AI (Delaware, United States) · Attorney-reviewed for release
| Data | Why | Kept |
|---|---|---|
| Account email (verified by one-time code; only the code's hash is ever stored) | Operating your account: push-quota integrity, subscription receipts, service notices | Until you delete the account |
| A random account identifier + monthly public-push counter | Enforcing the free tier's push quota | Rolls monthly; deleted with the account |
| Session cookie (strictly necessary, session-scope) | Holding your ephemeral surgery session together | Lives until the browser closes — one session per browser, shared by every tab (a second tab that loads a model takes it over, and the product says so); server side purged on idle/close |
| Model files and edits you load | Performing the surgery you request | Purged at session end — never retained, never linked to you |
| Operational logs (timestamps, status codes, coarse client identity for rate limiting) | Security and abuse prevention | Short-lived, rotated |
We do not sell personal data, run advertising, or use third-party analytics. We use only strictly-necessary cookies, so no cookie banner is required — and none is shown.
| Recipient | What | When |
|---|---|---|
| Stripe (payments) | Payment details are entered on Stripe's pages and never touch our servers; we receive a payment confirmation and subscription id | Only if you buy Practitioner |
| Hugging Face | The model you choose to pull or push, and the write token you type (used for that push only — never stored, never logged) | Only when you click Pull or Push |
| Email delivery provider | Your address, to deliver the verification code or receipts | At signup and billing events |
| Hosting infrastructure | The service runs on servers like any website | Always |
No other recipients. We never transmit your model weights anywhere except where you explicitly direct (a Hub push or a sidecar validation you invoke).
If you are in the EEA or UK you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority. Our lawful bases are contract performance (operating your account and subscription) and legitimate interest (security and abuse prevention). Data is processed in the United States; where GDPR applies we rely on Standard Contractual Clauses with our processors. Exercise any right by emailing privacy@falcons.ai.
Model Surgeon is an inspection and editing tool for model files you supply; it is not itself an AI system placed on the market for a regulated purpose, and it never executes your model. Its signed operation records, auto-generated model cards, and free public verification are designed to help you meet documentation and provenance obligations (including Annex IV-style technical documentation) for systems you build.
The service is not directed to children under 16 and we do not knowingly collect their data.
We will post changes here with a new effective date; material changes are announced to account holders by email.