Privacy policy

This policy describes what AblitLLM does with personal data. The controller is the operator named in the legal notice. The short version: we know your email and how many tokens you used, and we do not keep what you wrote.

What we store

• Account: your email address and a salted hash of your password (never the password itself), your plan and credit balance, and the date you signed up.
• Usage records: for each request, the model, token counts, cost, status, duration, time and the API key used. This is what billing and the usage page need.
• API keys: a hash of each key, its name, and when it was created and last used.
• Sessions: a hash of your sign-in token and its expiry date.
• Campaign source: if you arrived from an advertisement, the campaign parameters of that link (for example utm_source or a click id), kept with your account so we can tell which campaigns work.
• Blocked requests: the rule that blocked a request and the time. Not its text.
• Payments: handled by our payment provider. We receive a customer reference and the payment status, never your card number.

What we do not store

The text of your prompts and of the answers is processed in memory to produce the answer and is not written to our database or logs. Chat conversations are saved in your browser's local storage; clearing your browser data deletes them, and we cannot recover them because we never had them.

Why we process it, and on what basis

• To provide the service and bill for it: performance of the contract with you.
• To prevent abuse and fraud, and to measure which campaigns bring sign-ups: our legitimate interest.
• To keep accounting records: legal obligation.

Cookies

Two first-party cookies: one keeps you signed in, and one remembers the campaign parameters of the link you arrived from for 30 days. There are no third-party advertising or analytics cookies on this site.

Who receives data

Providers that run the service for us: hosting for the website and database, GPU infrastructure for model inference, and the payment provider. Inference servers receive the text of a request to answer it and are configured not to log it. We do not sell personal data and we do not use prompts to train models.

Retention

Account data for as long as the account exists. Usage and payment records for as long as accounting law requires. Sessions until they expire or you sign out.

Your rights

You can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Write to support@ablitllm.com. You can also lodge a complaint with your data protection authority.