Legal
Effective date: September 2026. Arctic Bison LLC, 30 N Gould St Ste N, Sheridan, WY 82801.
Short version
Altostratus collects no email address, no phone number, no real name, and no payment identity. You create an anonymous handle and a recovery key. That is the full extent of your identity in the system. We do not sell data, serve ads, or share your information with third parties.
Arctic Bison LLC operates the Altostratus infrastructure management platform and the Rudis crypto billing notifier. This policy applies to information processed when you use these products or visit arcticbison.com.
Account identifier. A handle you choose at signup. The handle is pseudonymous — it carries no association with your real identity unless you choose to make it identifiable.
Recovery key. A cryptographically derived recovery key is generated at account creation. The plaintext key is shown to you once and is not retained by Altostratus. We store a one-way HMAC-SHA256 representation only. There is no password recovery mechanism — the key you save is the only path to account recovery.
Provider credentials. If you connect cloud infrastructure providers, the API credentials you supply are encrypted at rest using AES-256-GCM and stored in encrypted form in the database. They are decrypted server-side only when you initiate infrastructure operations — provisioning, monitoring, or management actions. Plaintext credentials exist transiently in server memory during active operations only and are not written to logs or persisted outside of encrypted storage.
Subscription status. We retain your subscription tier and payment status. Payments are made in cryptocurrency (Bitcoin, Lightning Network, or Monero). No credit card number, bank account, or payment identity is collected or stored.
Audit log. Altostratus maintains an audit log of actions taken within your account — the action type, the resource affected, and a timestamp. IP addresses are not logged. The audit log is accessible to your account and is used to support the account security features of the platform.
Website analytics. arcticbison.com uses Plausible Analytics, a privacy-preserving analytics tool that does not use cookies, does not track individuals across sites, and does not collect personally identifiable information. Aggregate traffic data (page views, referrer, country) is processed by Plausible.
We do not collect your email address, phone number, real name, date of birth, government ID, IP address, browser fingerprint, or device identifiers. We do not collect or inspect the workloads, data, or traffic that run on the infrastructure you manage through Altostratus. The control plane knows that your infrastructure exists — it cannot see what runs on it or what data it holds.
AI Assist is a bring-your-own-key (BYOK) feature. You supply your own API key from Anthropic; that key is stored encrypted server-side and used only when you initiate an AI Assist session. When AI Assist is enabled, your prompts and redacted infrastructure context are sent directly to Anthropic's API using your key. IP addresses are redacted from all AI Assist queries in standard mode. Extended mode, which includes IP addresses, requires explicit opt-in. When AI Assist is toggled off, zero bytes are transmitted to any AI provider. Arctic Bison does not retain the content of AI Assist queries or responses.
Information we hold is used solely to operate the platform: authenticating your session, executing infrastructure operations you initiate, processing subscription payments, and maintaining platform security. We do not use your information for advertising, profiling, or any purpose other than operating the service.
We do not sell, rent, or share your information with third parties for commercial purposes.
Legal compulsion. Altostratus is designed to minimize what is available to compel. In response to a valid legal order, Arctic Bison could be required to disclose: the anonymous handle associated with an account, subscription status, the encrypted provider credentials stored on the account, and the audit log (action types and timestamps, no IPs). Provider credentials are encrypted server-side; a court order that includes the server environment would include the encryption key. What we cannot be compelled to disclose — because it does not exist in our systems — is your identity, your IP address, your billing identity, and the content of your workloads. We cannot produce what we do not hold.
Infrastructure providers. When you provision resources through Altostratus, your encrypted credentials are used to communicate with third-party infrastructure providers on your behalf. Those providers operate under their own terms and privacy policies. Altostratus does not control those providers' data practices.
Account data is retained for the duration of your subscription and for a reasonable period thereafter to support account recovery. If you initiate an Emergency Decommission through the platform, your infrastructure is destroyed and your encrypted provider credentials are revoked. Your account record (handle, subscription status) is not deleted by Emergency Decommission — only the infrastructure and credentials are wiped. To request full account deletion, contact us at sales@altostratus.com.
Provider credentials are encrypted at rest using AES-256-GCM. Project data-at-rest uses a two-tier key architecture (key encryption key / data encryption key). All platform traffic uses TLS. Session tokens are managed server-side with CSRF protection. The platform includes audit logging, RBAC, and access controls designed to limit exposure within the control plane.
Questions about this policy: sales@altostratus.com
Arctic Bison LLC, 30 N Gould St Ste N, Sheridan, WY 82801