Privacy &
Infrastructure Trust

Baritu was built on a foundational principle that distinguishes it from most AI infrastructure platforms: the infrastructure we generate is yours, not ours. We do not require proprietary hosting environments, locked deployment runtimes or vendor-specific configurations.

Generated systems are delivered as standard engineering artifacts — Docker Compose files, editable source code, canonical schemas, deployment configurations — that run on AWS, GCP, Azure, Railway, Render or any environment that supports standard containers. No Baritu dependency required after delivery.

We are transparent about what data exists in the context of using Baritu, what we do with it, and — critically — what we will never do with it.

Data that may be processed in the course of using the platform includes: generation task prompts and descriptions, generation metadata (vertical type, timestamps, scores), runtime operational events, observer diagnostics, account information, and usage statistics for credit management.

Baritu is designed around controlled infrastructure generation, runtime observability and operational separation between environments. The following principles guide how we build and operate the platform.

Baritu coordinates multiple external AI providers to support infrastructure generation and operational workflows. We disclose this clearly because transparency about provider usage is part of our operational trust commitment.

Generation tasks may be processed by one or more of the following providers, selected dynamically by Baritu's operational routing layer based on task type, provider availability and performance history.

Operational telemetry is collected to monitor runtime consistency, infrastructure reliability and system continuity. This telemetry informs platform improvements and is used to maintain operational quality across generations.

Telemetry includes generation scores (EV, SRE, Design), structural validation results, latency metrics, error fingerprints and provider performance data. Telemetry does not include personally identifiable information and is not linked to individual user identities in any operational or reporting context.

Customers retain full control over generated infrastructure, deployment environments and operational configurations. This is not a policy statement — it is an architectural reality of how Baritu delivers output.

Depending on your jurisdiction, you have specific rights regarding your personal data. To exercise any right, contact legal@baritu.com stating your right, jurisdiction and account email. All requests are processed within the timeframes required by applicable law.

Baritu uses a minimal set of cookies and browser storage, strictly limited to what is necessary for platform operation.

Strictly necessary: authentication session tokens, CSRF protection tokens, user preference settings (language, theme). These cannot be disabled without breaking platform functionality.

Analytics (where applicable): anonymized usage patterns to understand platform performance. No cross-site tracking. No advertising cookies. No third-party tracking pixels.

Baritu products are ad-free. We do not serve advertising and do not allow advertisers to use our platform to track users.

Baritu applies data handling practices aligned with the following regulatory frameworks. Where mandatory provisions of a local law are stricter than this policy, those provisions apply.

For any privacy-related question, data request or compliance inquiry, contact the appropriate channel below. We respond within the timeframes required by applicable law in your jurisdiction.