Privacy Policy

This Privacy Policy explains how Cheapestinference Lab, Co. ("Company", "we", "us") handles your data when you use our AI inference services. Privacy is a default of the product, not an add-on.

1. Your prompts and completions

• Never stored to disk. Prompts and model outputs are processed in memory during inference and discarded immediately after.
• Never used for training. We do not train any model on your data. Ever.
• Never shared with third parties. We exclusively serve open-source models on our own inference infrastructure; your data is not forwarded to third-party model providers.

2. What we store

• Account data — email, subscription status, and API key metadata (name, plan, rate limits).
• Usage metadata — request counts, token counts, and cost per key. We do not store the content of requests or responses.
• Payment information — card payments are processed by Stripe; USDC payments are verified on-chain (Base L2). We do not store card numbers.

3. What we log

Request metadata only — timestamps, model used, token counts, and response status codes. We do not log prompt content or model outputs under normal operation. In rare cases a small portion of requests may be inspected strictly for debugging or security purposes.

4. Data retention

• Account data — retained while your account is active; deleted within 30 days of account deletion.
• Usage metadata — retained for billing and analytics; aggregated and anonymized after 90 days.
• Inference data (prompts/completions) — not retained; processed in memory only.

5. Your rights

We honor GDPR data-subject rights. EU/EEA users may request access to, export of, or deletion of their personal data. To exercise these rights, email privacy@cheapestinference.com from the address associated with your account. We respond within the timeframes required by applicable law.

If you create API keys for your own users via the Management API, each key's usage is tracked independently. You can see per-key usage (token and cost counts) but you cannot access the content of your users' requests or responses.

6. Security & compliance

Data is transmitted over TLS and processed in secure, access-controlled datacenters. We restrict internal access to account and usage metadata on a need-to-know basis, and we do not store payment card numbers or inference content.

Our infrastructure is SOC 2 Type II and ISO 27001 certified, and our data handling is GDPR compliant. Data is processed in secure, audited datacenters.

7. Changes to this policy

We may update this policy from time to time by posting the revised version on this page and updating the date above. Material changes will be reflected here.