Privacy Policy

Last updated: July 19, 2026

llmair ("we", "us", or "our") operates the website llmair.ai and the API at api.llmair.ai (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

We collect information you provide directly and information collected automatically when you use our Service.

Account information: When you register, we collect your email address, password (hashed using bcrypt), and any optional profile details you choose to provide.

API credentials: You create API keys through your dashboard. We store a one-way hash of each key; the plaintext is shown to you only once at creation.

Payment information: Token top-ups and subscription payments are processed by PayPal. We do not store your credit card, debit card, or bank account details. We receive a payment confirmation token and your billing email from PayPal.

Usage data: We log API requests (timestamp, model, token counts, status code, latency) for billing, rate limiting, abuse prevention, and service improvement.

Communications: If you contact our support team, we retain the correspondence to resolve your issue and improve our service.

2. How We Use Your Information

We use the information we collect to:

  • Create and maintain your account;
  • Process payments and credit token purchases or subscription allotments to your balance;
  • Enforce subscription quotas, rate limits, and overage billing;
  • Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms;
  • Send you service-related notices (account verification, password reset, security alerts, billing receipts);
  • Respond to your support requests;
  • Analyze aggregate trends to improve the Service.

We do not use your API prompts or completions to train any AI model.

3. Data Sharing and Third-Party Services

We do not sell or rent your personal information. We share data only with the following categories of recipients, as needed to operate the Service:

  • Payment processor: PayPal processes payments under its own privacy policy.
  • AI model providers (upstream): Prompts you send through the API are forwarded to our upstream providers (e.g., SiliconFlow, Anthropic, OpenAI, Google) solely to generate completions. These providers receive the prompt content and standard request metadata.
  • Email delivery: Transactional emails (verification, receipts, security alerts) are sent via Resend.
  • Analytics: We use Plausible Analytics, a privacy-first, cookie-free analytics tool that does not track individuals across sites.
  • Hosting and infrastructure: Our servers, database, and object storage are hosted by trusted infrastructure providers.
  • Legal: If required by law, valid subpoena, or to protect our rights, safety, or property.

4. Cookies and Tracking

We use a small number of strictly necessary cookies for authentication (your session token) and security. We use Plausible Analytics for aggregated, cookie-less traffic measurement. We do not use advertising cookies or third-party tracking pixels.

5. Data Security

We employ administrative, technical, and physical safeguards designed to protect your information, including TLS encryption in transit, bcrypt password hashing, hashed API key storage, restricted database access, and regular backups. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required for legal, tax, accounting, or legitimate business purposes (for example, transaction records for tax compliance, or fraud-prevention logs).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate or incomplete data;
  • Request deletion of your data;
  • Object to or restrict certain processing;
  • Request a portable copy of your data.

To exercise these rights, contact us at support@llmair.ai. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. International Data Transfers

We are based in the United States and process data in the U.S. If you access the Service from outside the U.S., you understand that your information will be transferred to, stored in, and processed in the U.S. By using the Service, you consent to such transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the effective date. Material changes will be communicated by email or by a prominent notice on the Service before they take effect.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: support@llmair.ai