TryLLM

Privacy Policy

Last updated 14 September 2026

This Privacy Policy explains how TryLLM collects, uses, discloses and protects personal data when you visit tryllm.net, create an account, purchase credits or subscriptions, or use our OpenAI-compatible API (collectively, the "Service").

1. Who is responsible for your data

TryLLM is the controller of personal data described in this Policy. Privacy questions and rights requests may be sent to support@tryllm.net.

2. Data we collect

  • Account data — email address, account identifier, sign-in records and account status.
  • API-key data — a cryptographic hash and short prefix. The complete secret key is shown once and is not stored in recoverable form.
  • Usage data — model, token counts, request time, response status, cost, latency and other metadata needed to deliver and account for API usage.
  • Purchase data — product, amount, currency, payment status, transaction references, credit balance and subscription status. Payment processors receive card and billing details; we do not store complete card numbers.
  • Technical and security data — IP address, browser or client information, request headers, device signals and security events used for rate limiting, fraud prevention and incident response.
  • Communications — messages and attachments you send to support, including information required to investigate a complaint, payment or security issue.

3. Prompts, inputs and outputs

We transmit prompts and other request content to the model provider you select so that it can generate a response. We do not sell prompts or outputs and do not use them to train our own models. Our ordinary usage records contain accounting metadata rather than prompt or output text. Content may be processed transiently to route requests, detect abuse, troubleshoot a request you identify, or comply with law. Model providers process request content under their own terms, privacy notices and retention practices.

4. How and why we use personal data

  • to create and secure accounts and authenticate API requests;
  • to route requests, return outputs and provide technical support;
  • to measure tokens, maintain balances and administer subscriptions;
  • to process payments, refunds, disputes and tax records;
  • to prevent fraud, enforce our Terms and prohibited-use rules, protect users and investigate security incidents;
  • to comply with legal obligations and respond to valid legal process; and
  • to improve reliability and understand aggregate Service performance.

5. Legal bases

Where data-protection law requires a legal basis, we process data to perform our contract with you; to comply with legal obligations; and for legitimate interests such as securing, operating and improving the Service, preventing fraud and enforcing our Terms. We rely on consent where the law requires it. You may withdraw consent at any time without affecting earlier lawful processing.

6. How we disclose data

We disclose only the data reasonably necessary to service providers that support hosting, database and authentication, model inference, payment processing, email delivery, fraud prevention, security and customer support. We may also disclose data to professional advisers, to authorities when legally required, or in connection with a sale or reorganisation of the Service subject to appropriate safeguards. We do not sell personal data or disclose it for third-party behavioural advertising.

7. Payment providers

Purchases are processed by independent payment and merchant-of-record providers. They may collect your name, email, billing address, tax location, payment credentials and fraud-prevention signals under their own privacy notices. We receive transaction identifiers, payment status and limited customer information needed to credit your account, provide receipts, handle refunds and maintain financial records.

8. International transfers

We and our providers may process personal data in the United States, the European Economic Area and other countries. Where required, international transfers are protected by recognised safeguards such as adequacy decisions, standard contractual clauses, contractual security commitments or another lawful transfer mechanism.

9. Retention

Account data is retained while your account is active and for a reasonable period afterward. Usage and transaction records are kept as needed for billing, fraud prevention, disputes and legal or tax duties. Security logs are normally retained for a limited operational period unless an incident requires longer preservation. Support records are kept while relevant to the request. Data is deleted or anonymised when no longer needed, subject to backups and legal retention obligations.

10. Security

We use organisational and technical safeguards appropriate to the nature of the data, including encrypted transport, hashed API keys, access controls and monitoring. No system can be guaranteed completely secure. You should keep API keys confidential, use a unique sign-in method and revoke any key you suspect has been exposed.

11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing; obtain a portable copy; or withdraw consent. You may also complain to the data-protection authority responsible for your location. To exercise a right, email support@tryllm.net. We may verify your identity before acting. We aim to respond within 30 days, or within the period required by applicable law.

12. Account deletion

You may request deletion by contacting support. We will delete or de-identify account information and revoke active keys, except for data we must retain to satisfy legal obligations, resolve disputes, prevent fraud, secure the Service or establish legal claims. Some information may remain temporarily in protected backups.

13. Cookies and local storage

We use only storage and cookies needed for authentication, account security, theme preferences, checkout and bot protection. We do not use third-party advertising cookies. Browser settings may control optional storage, but blocking strictly necessary storage can prevent sign-in or payment functionality.

14. Children

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us so that we can investigate and delete it where appropriate.

15. Changes to this Policy

We may update this Policy to reflect changes in the Service, providers or law. We will publish the revised version and update the date above. Where a change materially affects your rights, we will provide additional notice when reasonably practicable.

16. Contact

Privacy questions, complaints and rights requests may be sent to support@tryllm.net. Please also review our Terms of Service.