Privacy Policy

1. Data we collect

• Account data — your email address and sign-in timestamps, handled through our authentication provider.
• API keys — stored only as a hash plus a short prefix, so the full key is shown once and cannot be recovered later.
• Usage records — the model used, token counts, timestamps, status and cost of each request, used for billing and abuse prevention.
• Billing data — credit balances, purchases and subscription status. Card details are handled entirely by our payment providers and never reach our servers.
• Technical data — IP address and request metadata kept briefly for security, rate limiting and bot protection.

2. Prompts and outputs

Prompts and completions are forwarded to the model provider you selected so your request can be answered. We do not use your prompts or outputs to train models, and we do not sell them. We keep only the metadata needed for billing (such as token counts), not the content itself, unless you explicitly ask us to retain something for support. Model providers apply their own retention policies to requests we forward.

3. Why we use your data

• to run the Service and route your API requests;
• to measure usage, charge credits and manage subscriptions;
• to detect fraud, abuse and security incidents;
• to answer support requests and send essential service emails.

4. Who we share it with

We share the minimum needed with the processors that make the Service work: our hosting and database provider, the model providers that serve your requests, our payment providers, our email delivery provider, and our bot-protection provider. We do not sell personal data or share it for advertising. We may disclose data where required by law.

5. Retention

Account and billing records are kept while your account is active and afterwards for as long as tax and accounting rules require. Usage records are kept for a rolling period sufficient for billing and dispute resolution. Security logs are kept for a short period.

6. Your rights

You can access, correct, export or delete your data, object to certain processing, and withdraw consent where it applies. Deleting your account removes your keys and profile; anonymised or legally required billing records may remain. Email support@tryllm.net and we will respond within 30 days.

7. Security

Traffic is encrypted in transit, API keys are stored hashed, and access to production data is limited to those who need it. No system is perfectly secure, so please rotate a key immediately if you suspect it has leaked.

8. Cookies

We use only the cookies and local storage needed to keep you signed in, remember your light or dark theme, and run bot protection on the sign-in form. We do not use advertising cookies.

9. International transfers and children

Our providers may process data outside your country, protected by standard contractual safeguards. The Service is not intended for children under 18.

10. Contact

Privacy questions go to support@tryllm.net. See also our Terms of Service.