Privacy Policy

Last updated: October 25, 2026

This notice explains how Interlink Digital Group Limited, company 05431902, trading as MetalCloud ("MetalCloud", "we", "our", or "us") handles personal data when you use the website and the services. It is written for the UK GDPR and the Data Protection Act 2018.

1. Who we are

We are the controller for account data, website data, and host records. The registered office is 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom. Contact: privacy@metalcloud.space. We have not appointed a data protection officer.

When you submit a job that contains personal data, you are the controller of that content and we are the processor. That processing is also covered by the Data Processing Agreement.

2. The two services

The Terms of Service describe two services.

• Reserved machine. The job runs on the UK-hosted machine named in the booking. During a reserved month that machine is not allocated to another customer. The job is not sent to the host network.
• Host network. The job is sent to an assigned host, who receives the job contents in order to run it. The Mac may be outside the United Kingdom. A host-network job is not a single-tenant booking.

In both services, a record of the job is kept in the platform database operated by Interlink Digital Group Limited. We do not publish a cloud region for that database.

3. Information we collect

Information you give us

• Account. Name, email address, password, and company name if you provide one. Passwords are stored as a hash.
• Payment. Stripe processes your card. We keep a record of the wallet, the amount, and the Stripe reference. We do not store the card number.
• Support. Messages you send to us.
• Job content. The prompts, code, files, and other material you submit, and the output and logs the job produces.
• Host records. If you host a Mac: payout details, machine description, and the country you give us.

Information collected when you use the service

• Usage. Job history, API calls, compute time, and wallet movements.
• Device and connection. IP address, browser type, and operating system.
• Signup check. The result of the Interlink Verify check on the registration form.

4. How we use it, and the lawful basis

• To provide the service, the wallet, and support. Contract.
• To keep billing and tax records. Legal obligation. We keep those records for 6 years.
• To secure the service, investigate abuse, and keep the platform reliable. Legitimate interests. Those interests are running a safe service. They do not override your rights.
• To send service messages, such as account and job notices. Contract.

We do not sell personal data. We do not make a decision that produces a legal effect, or a similarly significant effect, based solely on automated processing. Output from a model is for you to review.

5. Who can see a job

• You, through your account and the API
• Interlink staff who are operating or supporting the service, including the job record in the platform database
• For a host-network job, the assigned host, who receives the job contents in order to run the job

A job on the reserved machine is not sent to a host on the host network.

6. Recipients

• Stripe. Card payments. Stripe does not receive job content.
• Postmark. Transactional email, such as account and support messages.
• Interlink Verify. The bot check on the signup form, at verify.interlink.digital.
• Google Fonts. When your browser loads a page, it requests font files from Google. That request includes your IP address. Google Fonts is not used for job content.
• Assigned hosts. Host-network jobs only. The host receives the job contents.
• Authorities. Where the law requires us to disclose information, or where we need to protect our rights, our users, or the service.

The same recipients are listed in the Data Processing Agreement where they process job content or support that processing.

7. International transfers

We operate the company from the United Kingdom. A reserved-machine job runs on the UK-hosted machine named in the booking.

A host-network job runs on the assigned Mac. That Mac may be outside the United Kingdom. By submitting a host-network job, you instruct us to send the job contents to that host.

Stripe, Postmark, and Google Fonts may process the data described above outside the United Kingdom. Where a UK transfer tool is required for that processing, we rely on the provider's transfer terms.

8. Retention

• Account data. Kept while the account is open, then deleted within 30 days of closure.
• Job input, output, and logs. Kept in the platform database until you delete the job or close the account. They are then deleted with the account data. There is no automatic 24-hour deletion.
• Billing records. Kept for 6 years.

9. Security

Connections to the service use TLS. Jobs run in a sandbox. Access to the platform is limited to authenticated accounts and to staff who need it. Account secrets are encrypted with AES-256-GCM. Job records in the platform database are not all encrypted at rest.

We do not hold SOC 2. ISO 27001 is not certified. This notice does not claim a programme of penetration tests.

10. Cookies

We use essential cookies so you can sign in and use the dashboard. We do not use analytics cookies, and this site does not show a cookie-consent banner. You can block cookies in your browser. Blocking the session cookie will stop you signing in.

11. Your rights

You can ask us to:

• Confirm whether we hold personal data about you, and for a copy of it
• Correct inaccurate personal data
• Delete personal data, or restrict how we use it
• Receive personal data you provided, in a portable form
• Object to processing based on legitimate interests

Write to privacy@metalcloud.space. You can also complain to the Information Commissioner's Office at ico.org.uk.

If you are the controller of personal data inside a job, requests about that content should come from you, or with your authority. We handle those requests as described in the Data Processing Agreement.

12. Children

The services are for people who are at least 18. We do not knowingly collect personal data from children.

13. Changes

We may update this notice. For a material change we will email you or post a notice on the website before it takes effect. The date at the top of this page is the date of the current version.

14. Contact

Interlink Digital Group Limited t/a MetalCloud, 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom. Email: privacy@metalcloud.space.