Privacy

Summary; not a complete privacy notice

Complete purposes, legal bases, recipients, retention schedules and rights contacts; legal review pending. Overall status and remaining work

Incomplete privacy summary, not a finalized privacy notice. Account and organization data, request metadata and aggregate usage are processed; zero retention means prompt and completion bodies are not written to the database. Controller identity, purposes and legal bases, retention periods, recipients and rights procedures require completion and legal review before production processing.

Your data in this product

Account data: email, name, locale and metadata for created keys.
Usage metadata: model, region, tokens, latency and cost. Only zero body retention is implemented; prompt and completion bodies are not stored in the database.
Analytics: aggregate page counts without analytics cookies, stored IP addresses or user ids. Separate security metadata may include salted IP hashes; these are not automatically anonymous.

Bounded data exports

The account export me.json contains selected account fields, organizations, API-key metadata (no secrets), current policies, the latest 200 traces per organization and daily usage aggregates for 365 days. It is not a complete copy of all personal data and not a historical policy record.

The separate audit.ndjson export defaults to 7 days, allows at most 90 days and caps traces at 5000. Check counts.truncated in the manifest: reaching the cap marks the export as potentially truncated. Policies and endpoint cards reflect current state, not historical state at request time. Export windows are not deletion schedules; data-subject requests and deletion still require manual handling.

LLM EU is a private company. It is not an EU institution and not an AI Act conformity assessment body. "Verified" on LLM EU means documented, not legally certified.