Privacy Policy

Who this covers

This policy covers the Lutheos website, dashboard, API and chat app. It says what we collect, why we collect it, who else handles it, and what you can ask of us.

What we collect

• Account: your name, your email address and your user ID from GitHub or Google, when you sign in.
• Keys and usage: the names, previews and limits of your keys; your balance; and, for each request, the model, the token counts, the cost, the time and any error.
• Payments: the amount, the coin and network, the payment reference and status, and the transaction details the payment processor gives us. We never ask for a wallet’s seed phrase or private key, and you must never send us one.
• Security: your IP address, request metadata and rate-limit events, to stop abuse.
• Cookies: your session while you are signed in, and your choice of theme. We use no advertising cookies.
• Messages to us: what you write when you email support.

Your prompts and replies

To answer a request we pass your prompt through our gateway to a model that our GPU partner runs, and return its reply. The partner keeps neither your prompts nor the replies once a request is done: that is what zero data retention means here.

Conversations in Lutheos Chat are saved in your own browser. Clearing your browser’s data removes them.

Do not send secrets, payment-card data, or personal information about other people unless you are allowed to and your use follows the law.

How we use it

We use this information to sign you in, route and meter requests, bill them, credit payments, give support, prevent fraud and abuse, keep the records we need, and keep the service reliable.

We do not sell personal information, and we do not use it for advertising.

Who else handles it

To run Lutheos we rely on others, and each gets only what it needs: our GPU partner, who runs the models; GitHub and Google, for sign-in; the payment processor; and the hosting, database, notification and monitoring services behind the service.

We may also disclose information when the law requires it, or to protect people, the service or our rights.

Keeping data safe

We keep records for as long as we need them to run your account, bill, secure the service, settle disputes and follow the law, and then delete or anonymise them.

Access is limited by sign-in, by administrative controls, by encrypted storage of credentials and by keeping roles apart. No system is perfectly secure, and we cannot promise otherwise.

Your choices

You can ask to see, correct or delete the information we hold about your account, and you can revoke your keys in the dashboard at any time. Where the law of the place you live gives you other rights over your data, you may use them too.

We may keep some records where we must or need to: to prevent fraud, handle disputes, keep accounts, or follow the law.

Changes and contact

We may update this policy as the service changes; the date and version at the top of this page say which one applies. To make a request or ask a question, write to the address at the foot of this page.