How do you handle my data?

TL;DR

• Inputs: processed in real-time, then discarded. Not stored unless you click "Save to dashboard".
• Outputs: stored only in your dashboard if you save them. Otherwise discarded after delivery.
• No selling. We never sell your data. Period.
• No AI training. We never use your inputs to train AI models. See "Is my data used to train AI?" for full details.

What we DO collect

• Account data: email, name, password hash, billing details (Stripe-tokenized).
• Usage metadata: which tools you use, run timestamps, token counts (for billing + capacity planning). Aggregated, not content.
• Cookies: session, CSRF, and (with your consent) analytics.

Where data is stored

• Primary: Hetzner data centers in Helsinki (EU). Why this matters: GDPR-friendly jurisdiction.
• Backups: encrypted (AES-256), 30-day retention, same EU region.
• CDN cache: Cloudflare — only public assets (CSS, JS, images), never your inputs/outputs.

Sub-processors

The model that generates your output runs on our infrastructure (Hetzner Ollama for default models, OpenAI / Anthropic / xAI for premium). When premium APIs are used:

• We strip identifiers from the request.
• The vendor is bound by no-train-on-input contract terms.
• Full sub-processor list at /legal/sub-processors/.

Your rights

• Access: see all your data via /account/privacy/ → Export.
• Deletion: delete your account at /account/danger-zone/.
• Rectification: edit your data at /account/profile/.
• Portability: export in JSON (GDPR Art. 20).
• Lodge a complaint: with your local Data Protection Authority.

Full policy at /privacy-policy/.