Privacy Policy

This policy explains what LuxeChain collects when you use LuxeChain, why we collect it, how long we keep it, and the choices you have. It covers the website and the API.

1. The short version

• Your prompts and the models' outputs are not stored. They are streamed through the gateway and are not saved on our servers.
• We keep usage metadata — which model, how many tokens, what it cost, when — because that is how billing works.
• We keep the account details you give us, and the payment records the law requires.
• We do not sell your personal data, and we do not use it to train models.

2. What we collect

Account data. Your name, email address, and a hashed password. We never store your password in readable form.

Usage metadata. For each request: the model, the modality, the token counts, the cost, the timestamp, the response status, the latency, and the API key used. This is what your activity feed and your invoice are built from.

Billing data. The plan you bought, the amount, the payment reference and status. Card and UPI details are handled by our payment gateway; we receive only a reference and the outcome, never your full card number.

Technical data. IP address, browser type and version, and the pages you visit. We use the IP address to set your display currency, to apply rate limits, and to protect against abuse.

Support data. Anything you send us through the contact form, so we can answer you.

3. What we do NOT collect

We do not store the contents of your prompts or the models' responses. We do not run analytics that build advertising profiles of you, and we do not sell or rent personal data to anyone.

4. Why we use it, and our lawful basis

• To provide the Service — routing your requests, metering usage, and showing your balance. Necessity of contract.
• To take payment and keep financial records. Contract, and legal obligation.
• To keep the Service safe — rate limiting, abuse and fraud prevention, security monitoring. Legitimate interest.
• To answer you when you contact support. Contract or legitimate interest.
• To tell you about the Service, such as a price change or an outage. Contract, or legitimate interest where permitted; you can opt out of marketing messages.

5. Who else sees your data

We use a small number of processors to run the Service, and they act only on our instructions:

• Model providers — to generate the response you asked for, your prompt is transmitted to the provider serving that model. Their own terms and privacy policies govern what they do with it. We do not send them your name, email or payment details.
• Our payment gateway — to take the payment and handle refunds.
• Our hosting and infrastructure providers — servers, storage and network.
• Professional advisers and authorities — where we are legally required to disclose, or need advice.

Some of these providers operate outside India, so your data may be transferred and processed in another country. Where that happens we take steps to keep it protected to a standard consistent with this policy.

6. How long we keep it

• Usage metadata: 24 months — long enough to bill you, resolve a dispute, and show your history.
• Account data: while your account is open, then for as long as we need it to meet legal and accounting duties.
• Billing records: 8 years, as tax and company law requires.
• Support messages: up to 24 months after the issue is closed.

7. Security

Passwords are stored hashed. Traffic to and from the site is encrypted in transit. Access to production systems is restricted, and API keys are stored in a form that does not let us read the key back in full. No system is perfectly secure, so keep your keys secret and tell us at once if you think one has leaked.

8. Your rights

You can ask us for a copy of your personal data, ask us to correct it, ask us to delete it, object to certain processing, or ask us to restrict it. Write to us through our contact form and we will respond within the time the law allows. If you are in the EU, UK or another region with equivalent law, you also have the right to complain to your local data-protection authority. Deleting your account data may mean we can no longer provide the Service to you.

9. Cookies

We use a small number of essential cookies, chiefly to keep you signed in. We do not use advertising or cross-site tracking cookies. Blocking essential cookies will stop sign-in from working.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their personal data. If you believe a minor has given us data, contact us and we will delete it.

11. Changes to this policy

If we change this policy materially we will tell you by email or on the site before the change takes effect.

12. Contact

Data questions and requests: contact us. See also our Terms of Service.