Privacy Policy
Last updated: September 25, 2026
Nielogiczny Karol Labuda, Luzińska 2, 84-217 Zęblewo, Poland, NIP PL5882505100 (“we”) is the controller of personal data processed through layahost. For API content you send, you are the controller and we process it on your behalf, only to answer your requests.
What we collect
| Data | Why | How long |
|---|---|---|
| Account: name, email, hashed password, security settings | Running your account | Until you delete the account |
| Billing: Stripe customer ID, payment and invoice records | Payments, invoices, accounting duties | As long as tax law requires |
| API request content (text you send) | Computing the decision | Processed in memory; identical requests may be answered from an in-memory cache for up to 1 hour. Not written to disk unless you enable request text in logs. |
| Request logs: time, status, verdicts, latency, cost, API key used | Your usage dashboard, billing, abuse prevention | 7 days |
| Request text in logs (opt-in, and playground runs) | Debugging decisions in your console | 7 days; you can delete it any time in Settings |
| Aggregated daily usage (counts, cost, latency) | Dashboard and billing | Until you delete the account |
| Website analytics (pages viewed, referrer, country) | Improving the site | Self-hosted Umami, no cookies, no personal profiles |
We never use your API content to train models and never sell personal data.
Processors
- Stripe (payments and invoices), which may process data outside the EU under Standard Contractual Clauses.
- Hetzner Online GmbH (servers in Helsinki, Finland, EU).
- Cloudflare, Inc. (DNS, TLS and network protection), under Standard Contractual Clauses.
- Purelymail (account and billing emails), under Standard Contractual Clauses.
Legal bases
Contract (providing the Service and processing API content for you), legal obligation (tax and accounting), and legitimate interests (security, abuse prevention and cookieless analytics).
Your rights
Under the GDPR you can access, correct, delete, restrict or export your data and object to processing based on legitimate interests. You can delete your account in Settings. You may complain to the Polish supervisory authority (Prezes UODO) or your local authority.
Contact
[email protected]. A data processing agreement for API content is available on request.