Privacy Policy

• Operate and maintain the LLMRPM API gateway, portal, and console.
• Enforce plan request windows and optional key-level controls.
• Calculate plan usage and billing across Stripe and Plisio transactions.
• Send transactional emails (account verification, receipt confirmations, critical service notices).
• Respond to support requests submitted through our contact form.
• Detect, investigate, and prevent abuse, fraud, and security incidents.
• Improve service reliability, performance, and feature quality.

We do not sell your personal data. We share data only in the following limited circumstances:

• Upstream AI Providers: Your API requests are forwarded to the relevant upstream inference provider. These providers receive only the request payload required to fulfil inference — they do not receive your account details or billing information.
• Stripe: Stripe processes card payments. Stripe's handling of payment data is governed by Stripe's own privacy policy.
• Plisio: Plisio processes cryptocurrency payments. Plisio's handling of payment data is governed by Plisio's own privacy policy.
• Legal Compliance: We may disclose information if required by law, court order, or valid governmental request.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction, subject to equivalent privacy protections.

Account data is retained for as long as your account is active. Usage logs and billing records are retained for up to 12 months for billing dispute resolution and abuse prevention. Web server access logs are rotated on a shorter cycle. If you close your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer.

The LLMRPM website and portal use strictly necessary cookies to maintain your authenticated session. The session cookie is scoped to .llmrpm.com so it is shared across the marketing site, the developer portal, and the admin console. We do not use third-party advertising cookies or behavioral tracking scripts. We do not load analytics SDKs that fingerprint your device.

We use TLS encryption for all data in transit. Passwords are hashed using bcrypt. API keys are stored as SHA-256 hashed values and are only shown in full once at creation. While we take reasonable precautions, no system is completely immune to security risks, and we encourage you to use strong, unique passwords, enable email verification, and rotate API keys regularly.

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated personal data.
• Object to or restrict processing of your data.
• Data portability (receive a copy of your data in a structured format).

To exercise any of these rights, use our contact form. We will respond within 30 days.

LLMRPM services are intended for individuals 16 years of age or older. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us via our contact form and we will promptly delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of LLMRPM services after a policy change constitutes your acceptance of the revised terms.

For privacy-related questions or requests, please use our contact form or email admin@llmrpm.com. We read every message and respond promptly to privacy inquiries.