Privacy Policy
Last updated: April 12, 2026
1. Information we collect
We collect the following categories of personal information:
Account and Contact Information. Account email address.
Payment Information. Billing information (processed by Stripe - we do not store card data).
Internet or Network Activity Information. AI inference metadata: model name, provider, latency, status code, timestamp, and SHA-256 hashes of inputs/outputs.
2. Information we do not collect
Raw AI inputs and/or outputs are never stored. We cannot reconstruct what was sent to and/or received from any AI provider.
3. How we collect information
We obtain the personal information described above from the following sources:
Directly from you, such as when you create an account or provide billing information.
Automatically through our Services, such as AI inference metadata collected during your use of our software.
From third-party service providers, such as Stripe for payment processing.
4. How we use your information
We use the personal information we collect for the following business and commercial purposes:
To provide you with our Services and software functionality.
To fulfill and manage subscriptions, purchases, orders, and payments.
To process transactions and maintain billing records.
To improve our Services, including analyzing usage patterns and system performance.
To maintain and operate our systems and infrastructure.
To comply with legal obligations, including financial record-keeping requirements.
To enforce our Terms of Service and other agreements with you.
To protect the rights, property, and safety of our company, customers, and others.
5. Legal basis (GDPR)
We process your data to perform the Terms of Service agreement you have with us (Art. 6(1)(b) GDPR) and to comply with financial record-keeping obligations (Art. 6(1)(c) GDPR).
6. Disclosure of your information
We may disclose the personal information we collect as follows:
To Service Providers and Contractors. We disclose personal information to third-party service providers who perform services on our behalf, such as: - Payment processors (Stripe) for billing and payment processing. - Cloud infrastructure providers (AWS via Supabase) for data storage and hosting.
These service providers are contractually obligated to keep personal information confidential and use it only for the purposes for which we disclose it to them.
For Legal Purposes. We may disclose your personal information: - To comply with any court order, law, or legal process, including responding to government or regulatory requests. - To enforce our Terms of Service and other agreements. - If we believe disclosure is necessary to protect the rights, property, or safety of our company, customers, or others.
Business Transfers. We may disclose personal information to a buyer or other successor in the event of a merger, acquisition, restructuring, or sale of assets.
We do not sell or share your personal information with third parties for their marketing purposes.
7. Data residency
All data is stored in the EU, namely AWS eu-central-1 (Frankfurt, Germany) via Supabase. This applies to all plans.
8. Retention
We retain personal information for as long as reasonably necessary to fulfill the purposes described in this policy or as otherwise legally permitted or required.
Inference logs are append-only and retained indefinitely by design - this is core to the compliance value of the service. Account data is deleted upon request, subject to our legal obligations and legitimate business needs.
9. Data security
We use commercially reasonable administrative, physical, and technical measures designed to protect your personal information from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no system is completely secure, and we cannot guarantee the absolute security of your information. Any transmission of personal information is at your own risk.
The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal information against unauthorized use, disclosure, and access.
10. Your rights
EU Residents. If you are located in the European Union, you have the right to access, rectify, and erase personal data. Contact [email protected] to exercise these rights. Note: inference log hashes cannot be deleted as they contain no personal data.
Your State Privacy Rights. Depending on your state of residency, you may have certain rights related to your personal information, including:
Access and Data Portability. You may confirm whether we process your personal information and access a copy of the personal information we maintain about you.
Correction. You may request that we correct inaccuracies in your personal information.
Deletion. You may request that we delete personal information about you, subject to certain exceptions under applicable law.
Opt Out of Sales, Sharing, and Targeted Advertising. You may request that we do not sell or share your personal information or use it for targeted advertising purposes. However, we do not currently sell or share personal information or engage in targeted advertising.
Important: The exact scope of these rights varies by state, and there are exceptions where we may not be able to fulfill your request.
To exercise any of these rights, please contact us at [email protected].
Nevada Residents. Nevada law provides residents with a limited right to opt out of certain personal information sales. If you are a Nevada resident and wish to exercise this right, you may submit a request to [email protected]. However, we do not currently sell personal information as defined under Nevada law.
11. California residents
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information. This section describes those rights and how to exercise them.
Personal Information We Collect
We have collected the following categories of personal information from California consumers within the last 12 months:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Email address, account identifiers | YES |
| B. California Customer Records (Cal. Civ. Code § 1798.80(e)) | Name, email address, billing information, payment card information | YES |
| F. Internet or Network Activity | AI inference metadata (model name, provider, latency, status code, timestamp, SHA-256 hashes) | YES |
We do not collect sensitive personal information as defined by the CCPA.
Sources of Personal Information
We obtain personal information from the following sources: - Directly from you when you create an account or use our Services. - Automatically through your use of our Services. - From third-party service providers such as payment processors.
Business or Commercial Purposes for Collecting Personal Information
We use personal information for the business and commercial purposes described in Section 4 (How we use your information) of this policy, including: - Providing and maintaining our Services. - Processing transactions and billing. - Improving our Services and system performance. - Complying with legal obligations. - Protecting our rights and the security of our Services.
Disclosure of Personal Information
We have disclosed the following categories of personal information to service providers for business purposes in the preceding 12 months: - Categories A, B, and F to payment processors and cloud infrastructure providers.
We do not sell or share personal information as those terms are defined under the CCPA.
Your California Privacy Rights
As a California resident, you have the following rights:
Right to Know. You may request that we disclose: - The categories of personal information we collected about you. - The categories of sources from which we collected your personal information. - Our business or commercial purpose for collecting personal information. - The categories of third parties with whom we share personal information. - The specific pieces of personal information we collected about you.
Right to Delete. You may request that we delete personal information we collected from you, subject to certain exceptions.
Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out. You have the right to opt out of the sale or sharing of your personal information. However, we do not sell or share personal information.
Right to Non-Discrimination. You have the right not to receive discriminatory treatment for exercising your CCPA privacy rights.
How to Exercise Your California Rights
To exercise your rights to know, delete, or correct, please submit a request by emailing [email protected].
We will verify your identity before processing your request. You may be required to provide information to confirm your identity, such as your email address and account details.
We will respond to verifiable requests within 45 days of receipt. If we require more time, we will inform you of the reason and extension period in writing.
Authorized Agents. You may designate an authorized agent to make a request on your behalf. We may require verification of both your identity and the authorized agent's authority to act on your behalf.
Contact for California Privacy Rights
For questions about your California privacy rights or to submit a request, contact us at [email protected].
12. Children's privacy
Our Services are not intended for, and we do not knowingly collect personal information from, individuals under the age of 18. Our Services are designed for business users who are authorized to enter into contracts on behalf of their organizations. If we learn we have collected personal information from someone under 18 without appropriate authorization, we will delete that information.
13. Changes to this privacy policy
We may update this privacy policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy and posting the updated policy on our website. Your continued use of our Services after we make changes constitutes acceptance of those changes. We encourage you to review this policy periodically.
14. Contact us
If you have questions about this privacy policy or wish to exercise your privacy rights, please contact us at: