Privacy Policy

1. What we collect

Account data: name, work email, organisation, billing details. Usage data: request metadata such as model, provider, token counts, latency, cost and error codes.

Prompt and completion content is stored only if your project has body logging enabled. New projects default to metadata-only.

2. Why we process it

To route and bill requests, to detect abuse, to provide the analytics and observability features you have enabled, and to meet legal obligations.

We never process your content to train models — ours or anyone else's.

3. Retention

Metadata is retained according to your plan's log window, configurable from 0 to 730 days. Bodies follow the same window when enabled. Billing records are kept for seven years as required by tax law.

Deleting a project purges its logs within 24 hours across all replicas.

4. Sharing

Prompts are transmitted to the inference provider selected by your routing policy. Each provider's retention and training terms are published on its provider page and can be used as a routing constraint.

Our infrastructure sub-processors are listed in the Trust Center. We give 30 days' notice before adding one.

5. International transfers

Region pinning is not implemented. Your prompt is transmitted to whichever provider your routing preferences select, in whatever region that provider serves it from, and you should assume transfers outside the EEA occur. Each provider's own regions are listed on its provider page, and any provider can be excluded from your traffic with a routing preference — today that is the only control over where a request goes.

6. Your rights

Access, rectification, erasure, portability and objection, exercisable from the dashboard or through the support form under Dashboard → Support. We respond within 30 days.

You may lodge a complaint with your supervisory authority; ours is the Dutch Autoriteit Persoonsgegevens.