Privacy Notice

Controller and contact

The organization operating this instance is the data controller or processor identified in the applicable service agreement. Contact support for the privacy contact and regional representative.

Information we process

Account identifiers, authentication/session records, job prompts and outputs, project metadata, audit events, diagnostics and communication preferences. Do not submit secrets or unnecessary personal data to prompts or logs.

Purposes and legal bases

We use data to provide the service, secure accounts, execute queued work, prevent abuse, maintain auditability and provide support. Where required, processing relies on contract, legitimate interests, consent or legal obligation; the applicable basis depends on the deployment and jurisdiction.

Retention and deletion

Operators configure retention for jobs, logs, audit records and backups. Data may remain in backups or legal records for a limited period. Use the data request process for access, correction or deletion requests.

Regional rights

Depending on location, individuals may have rights to access, correct, delete, restrict, object, obtain portability, withdraw consent and appeal a decision. California consumers may have CCPA/CPRA rights, EU/EEA/UK individuals may have GDPR rights, and Canadian individuals may have PIPEDA or provincial-law rights.

International transfers and processors

Self-hosted deployments control their own infrastructure and subprocessors. Hosted deployments must publish the actual providers, locations and transfer safeguards in the service agreement or subprocessor register.