1. What We Collect
We collect information you provide directly when you create an account, including your name, email address, and billing information. We also collect:
- · Decision payloads — the input prompts and metadata you submit to the API
- · Audit logs — model outputs, confidence scores, latency, cost-per-decision
- · Usage data — API call volumes, error rates, SDK version, IP address
- · Communication data — emails and support tickets you send us
We do not knowingly collect personal data embedded inside decision payloads. It is your responsibility to strip PII from payloads before submission.
2. How We Use Data
We use collected data to:
- · Provide, operate, and improve the Service
- · Process payments and manage your account
- · Send transactional emails (API key issuance, billing receipts, threshold alerts)
- · Detect, investigate, and prevent fraud and abuse
- · Produce anonymized aggregate statistics about platform performance
We do not sell your data to third parties. We do not use your decision payloads to train models.
3. Data Retention
Decision audit logs are retained for as long as your account is active, plus 90 days following account closure. Account data (name, email, billing history) is retained for 7 years as required for accounting and legal compliance. You may request earlier deletion of personal data subject to legal retention requirements by contacting [email protected].
4. Third Parties
We share data with the following sub-processors:
OpenRouter
Model routing and fan-out. Decision payloads are transmitted to route requests to underlying LLM providers. No retention by OpenRouter beyond request completion.
Stripe
Payment processing. Billing name, card details, and invoicing. Stripe is PCI DSS Level 1 certified. We do not store card numbers.
Mailgun
Transactional email delivery. Your email address is shared to deliver receipts, API key notices, and threshold alerts.
5. Your Rights
Depending on your jurisdiction you may have the right to:
- · Access a copy of the personal data we hold about you
- · Request correction of inaccurate data
- · Request deletion of your personal data (subject to legal retention obligations)
- · Object to or restrict processing in certain circumstances
- · Receive your data in a portable format
- · Lodge a complaint with your local data protection authority
6. Contact
For privacy-related requests or inquiries, contact our privacy team at [email protected]. We respond to all verified requests within 30 days.