Privacy Policy

1. Scope

Applies to the web app, APIs, SDKs, and related services, including accounts created via Google Sign-In or email/password.

2. Data We Collect

• Account Data: name, email, organization, password hashes (for email sign-in), Google account ID/profile email (for Google Sign-In), auth tokens, role/permissions.
• Service & Usage Data: logs of requests/responses (excluding your content where configured), IP address, device/browser info, timestamps, diagnostics, feature usage, configuration metadata.
• Content You Provide: prompts, files, and outputs you send through the platform (as applicable to your plan/settings).
• Billing Data: payment instrument details (handled by our payment processor), transaction history, tax/billing contact info.
• Support Data: information you share with support, including attachments and chat/email communications.
• Cookies & Similar Tech: cookies and local storage for session management, security, and preferences.

3. How We Use Data

• Provide, operate, secure, and improve the services.
• Authenticate users (Google Sign-In and email), manage sessions, and enforce access controls.
• Process requests via APIs/SDKs, route jobs, and deliver outputs.
• Monitor reliability, debug issues, and prevent fraud, abuse, and security incidents.
• Provide support, notify you about changes, and send service-related communications.
• Comply with legal obligations and enforce our terms.
• With appropriate consent/legitimate interest, improve models/features using de-identified or aggregated data.

4. Legal Bases (EEA/UK where applicable)

Contract (service delivery), legitimate interests (security, improvement, fraud prevention), consent (where required, e.g., certain cookies/communications), and legal obligation.

5. Sharing & Disclosure

• Service providers (hosting, analytics, email, payments, customer support) under confidentiality and data protection terms.
• Enterprise administrators may access data for users under their org account.
• Legal compliance, safety, fraud prevention, or in response to lawful requests.
• Business transfers (merger, acquisition, financing, or sale) subject to this Policy or equivalent protections.
• Aggregated/de-identified data that does not identify individuals.

6. Data Retention

We retain personal data for as long as needed to provide the services, comply with legal obligations, resolve disputes, and enforce agreements. Logs and backups are kept for limited periods consistent with these purposes.

7. Security

We use administrative, technical, and physical safeguards appropriate to the risk (e.g., encryption in transit, access controls, audit logging). No system is perfectly secure; you are responsible for maintaining the security of your credentials and configurations.

8. Google Sign-In & Google User Data

When you authenticate using "Sign in with Google," we access the following Google user data:

• Google Account ID (unique identifier)
• Email address (primary email from your Google account)
• Profile name (if available)

Storage: Google user data is stored in our secure databases for as long as your account is active. See Section 6 (Data Retention) for details.

Sharing: We do not sell or share your Google user data with third parties for their own purposes. Google user data may be shared with service providers solely to operate our services (see Section 5).

Limited Use Disclosure: Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not receive your Google password. Google's use of your data is governed by Google's Privacy Policy.

9. International Transfers

Data may be processed in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

10. Your Rights

Subject to applicable law, you may have rights to access, correct, update, delete, or port your data, and to object to or restrict certain processing. You may also withdraw consent where processing is based on consent. To exercise rights, contact us at privacy@large-language-platform.com. Enterprise users should also contact their administrator.

11. Cookies & Preferences

You can control cookies via browser settings. Disabling required cookies may impair service functionality.

12. Children

The services are not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided data, contact us to delete it.

13. Changes

We may update this Policy. We will post updates here and, if material, notify you by email or in-app. Continued use after an update means you accept the revised Policy.

14. Contact

Questions or requests: founders@llphq.com