Privacy Policy

Inafield (Pty) Ltd (“Inafield,” “we,” “us”) operates activated.cloud and makes the Activated Cloud hardware, Activated Cloud OS, and the Activated Cloud apps for phone and desktop: the application shown on Google’s consent screen as Activated Cloud AI. This Privacy Policy covers all of them: what we collect when you order a device, what your Activated Cloud and the Activated Cloud app handle once it is set up, and what happens to any third-party account you connect to it.

Information you provide

• Email address: collected when you reserve an Activated Cloud or subscribe to updates.
• Payment information. Your card details are collected by Stripe during checkout. We never see, store, or process raw card numbers on our servers.
• Shipping address: name and mailing address, collected during the preorder flow so we can ship your Activated Cloud when production is complete.

Information generated automatically

• Order metadata: order ID, reservation status, amount, Stripe customer ID, and payment method ID.
• Analytics data: page views and conversion events collected via the Meta, TikTok, and Lapis pixels.

We use Stripe to handle all payment processing. When you reserve an Activated Cloud, a $50 non-refundable deposit is charged immediately through Stripe. Key details:

• Your card information is transmitted directly to Stripe and is never sent to or stored on our servers.
• We store only Stripe-issued identifiers (customer ID, payment intent ID, payment method ID) to reference your account.
• A $50 deposit is charged at the time of reservation. Before shipment, we will email you to confirm your address and final total, then charge the remaining balance plus flat $15 shipping per unit, worldwide, through Stripe after the 7-day adjustment window. International orders may have additional carrier or import costs due on delivery.

Google Analytics

We use Google Analytics 4 to understand how the website is used: which pages are viewed, roughly where visitors are, and what device and browser they use. It sets first-party cookies (_ga, _ga_*) that expire after two years. Google Analytics 4 does not log or store IP addresses. You can opt out with Google’s browser add-on.

Meta Pixel (Facebook & Instagram)

We load the Meta Pixel to measure the effectiveness of ads we run on Facebook and Instagram and to understand how visitors interact with our website. The pixel reports page view events, checkout initiation events, and purchase/lead conversion events to Meta Platforms, Inc.

TikTok Pixel

We load the TikTok Pixel to measure the effectiveness of ads we run on TikTok. It reports the same categories of events to TikTok Inc. You can opt out of interest-based advertising through your TikTok Ad Settings or the Digital Advertising Alliance opt-out.

Lapis Pixel (ChatGPT Ads)

We load the Lapis Pixel to measure the effectiveness of ads we run on ChatGPT. The script loads on every page, but it only begins tracking once you arrive from one of those ads, the landing URL carries a ChatGPT campaign parameter, after which it reports page views, conversions, the campaign, ad group and ad from the landing URL, and sets a first-party cookie (lapis_sid) that expires after 30 days. Before it is set, and once it expires, the script sends no tracking event.

UTM parameters

Ads we run may include UTM tracking parameters appended to the destination URL. These are read by the ad platform pixels described above to attribute your visit to a specific campaign. UTMs are URL metadata only. No additional personal data is collected through them.

When you provide your email address we share it with two email providers. Our marketing list is managed by Loops, which handles product announcements and waitlist updates. Transactional order email is delivered by Resend. Together they process your email to send:

• Order confirmations, preorder status updates, and shipping notifications
• Product announcements and updates

Every marketing email includes an unsubscribe link. Transactional emails will still be sent as needed.

Order data (email, shipping address, Stripe reference IDs, order status, timestamps) is stored in a PostgreSQL database hosted by Neon in the US-East-1 region. The connection is encrypted via TLS. We do not store passwords, raw card numbers, or sensitive authentication credentials in our database.

Data on your Activated Cloud

Your files, credentials, browser sessions, and agent working data reside locally on the device. We do not copy, sync, or back that data up to our servers. Outbound traffic is whatever your agents do themselves, API calls, web browsing, emails sent, plus the AI model requests and account services described below.

Account and device data

• Account details. Your name, email, and the account identifier returned by Sign in with Apple, Google Sign-In, or email and password.
• Device details: device identifier and serial number, the name you give the device, OS version, last-seen time, and connection and health state.
• Push notification token: used only to deliver notifications the product needs: tool-approval prompts and new-device pairing alerts.
• Billing and usage records. Your prepaid AI-credit balance, transaction history, Stripe identifiers, and the token count and cost of each AI request.

The Activated Cloud app contains no analytics, attribution, or advertising SDK. We do not collect advertising identifiers, do not track you across other apps or websites, and do not sell your data. The advertising pixels described above run on our website only, never in the app.

Conversations with your Activated Cloud

Chat between the app and your Activated Cloud is end-to-end encrypted. Messages pass through our relay so the app can reach your device from anywhere, but the relay forwards ciphertext it cannot read. We cannot see the content of your conversations, and we do not store them.

AI model requests

When your agent calls an AI model, the request is routed through our AI gateway to the model provider you select, currently Anthropic, OpenAI, Google, DeepSeek, or Together AI. The provider receives the content of that request and returns the response. We record only the token count and cost, so we can bill you. No account, contact, or payment information is sent to model providers.

Connected accounts (Google)

You can connect your own Google Account so your agent can work your Gmail, Google Calendar, and Google Drive on your behalf. Connecting is optional, nothing is connected by default, and you grant access on Google’s own consent screen. The access tokens are stored encrypted on your Activated Cloud, not on our servers, and your Activated Cloud calls Google directly. Actions that change something pause and ask you to approve them first. Content fetched from Google is used to answer the request in front of you and is not retained afterwards.

Activated Cloud AI’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train AI models.

Remote access (Tailscale)

Remote access is optional and off by default. If you turn it on, your Activated Cloud joins a private network you create with your own Tailscale account. You sign in to Tailscale directly; we never see or store your Tailscale credentials, and we send no data about you to Tailscale. The connection is split-tunnel, it carries traffic to your own devices on your own private network and nothing else.

We share information with the following third-party services, each for a specific purpose:

We retain your order data for as long as necessary to fulfill your order and comply with legal obligations. After that period:

• Cancelled reservations. Data is deleted within 90 days of cancellation.
• Completed orders. Data is retained for up to 7 years for accounting and legal compliance, then deleted.
• Email subscribers. You can unsubscribe at any time. Upon request, we will delete your email from our marketing lists within 30 days.

Depending on your jurisdiction, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to or restrict processing, and receive your data in a portable form.

To exercise them, contact us at the address below. We will respond within 30 days.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on our website. The “Effective” date at the top of this page indicates when the policy was last revised.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: