Privacy Policy

• Account information: name, email address, organisation if you give it, what you tell us about your intended use, and the access decisions we make.
• Billing information: plan, credit balance and ledger, payments and invoices. Card details are collected and held by Stripe; we never see the full number.
• Request metadata for every API and playground call: time, model and version, task, input and output sizes and token counts, credits charged, latency, status and error codes, the API key and account used, IP address, approximate country and user agent.
• Security and service logs: sign-ins, administrative actions on your account, and server logs that may include IP addresses.

• The content of your requests and the model outputs. They pass through our systems to produce the response and are not stored; an input may be held in memory for a few minutes so a follow-up request can refer to it by hash.
• We do not use your content or your users' content to train models.
• We do not sell personal information or use it for third-party advertising.

• To provide the Services: authenticate you, run and bill requests, show your usage and invoices.
• To keep the Services secure and reliable: prevent abuse and fraud, enforce limits and our policies, investigate incidents.
• To operate and improve the Services in aggregate: capacity planning, latency and error analysis, product decisions. This uses request metadata, never request content.
• To communicate with you: sign-in links, access decisions, billing notices, service and policy changes. You can opt out of non-essential messages.
• To comply with law: tax, accounting and lawful requests.

Performance of our contract with you; our legitimate interests in securing and improving the Services (balanced against your rights); legal obligations; and consent where we ask for it.

• Account information: while your account is open, and up to 90 days after closing it, unless we must keep it longer.
• Request metadata used for analytics: 400 days. Billing records (usage charges, payments, invoices): as long as tax and accounting law requires.
• Security logs: up to 12 months.

Service providers that run parts of the Services for us under contract (the current list, with what each does and where, is on our Subprocessors page), professional advisers, and authorities where the law requires it. If Ruliad is involved in a merger or acquisition, information may transfer under the same protections.

We and our providers process data in the United States and the European Union. Where the law requires, transfers are protected by the European Commission's Standard Contractual Clauses or an equivalent mechanism.

Depending on where you live, you may access, correct, delete, restrict or export your personal information, object to processing, and withdraw consent. Write to privacy@ruliad.co; we answer within 30 days and may need to verify your identity. You may also complain to your data-protection authority.

Encryption in transit everywhere, encrypted secrets, least-privilege access with audit logs, API keys stored only as hashes, and regular backups with restore tests. No system is perfectly secure; we will notify you and authorities of a breach affecting your personal information as the law requires.

The Services are not for anyone under 18, and we do not knowingly collect their information.

We will post changes here and notify you of material ones. Contact: privacy@ruliad.co, [Ruliad legal entity name], [registered address].