Privacy Policy

1. Introduction

Adaptive ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our LLM infrastructure platform ("Service"). Please read this privacy policy carefully.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, organization details
• Authentication Data: Login credentials, API keys for third-party providers
• Chat Content: Your prompts, messages, conversations, and AI responses
• Payment Information: Billing details processed securely through Stripe
• Support Communications: Messages sent through our support channels

2.2 Automatically Collected Information

• Usage Analytics: API request counts, token usage, response times, error rates
• Technical Data: IP addresses, browser information, device identifiers
• Performance Metrics: System performance, latency measurements, provider statistics
• Log Data: Server logs, error reports, security events
• Cookies: Authentication tokens, preferences, session data

2.3 Third-Party Provider Data

• Provider Responses: AI-generated content from OpenAI, Anthropic, Google, Meta, Groq, DeepSeek, Cohere, Mistral, HuggingFace, and others
• Provider Metadata: Model information, usage statistics, cost calculations
• Provider Configurations: Your custom provider settings and API configurations

3. How We Use Your Information

We use your information to:

• Provide the Service: Route requests, manage conversations, process responses
• Account Management: Create accounts, authenticate users, manage subscriptions
• Analytics: Generate usage reports, cost analysis, performance metrics
• Optimization: Improve service performance, model selection, routing efficiency
• Support: Respond to inquiries, troubleshoot issues, provide assistance
• Security: Monitor for abuse, prevent fraud, maintain system security
• Compliance: Meet legal obligations and industry standards
• Communications: Send service notifications, updates, billing information

4. Third-Party Provider Data Sharing

4.1 Providers We Work With

• OpenAI: GPT models and related services
• Anthropic: Claude models and AI safety research
• Google AI: Gemini models and Google's AI services
• Meta: Llama models and AI research platforms
• Groq: High-performance AI inference
• DeepSeek: Advanced reasoning models
• Cohere: Enterprise language models
• Mistral: Open and commercial language models
• HuggingFace: Open-source model hosting
• Other Providers: Additional AI service providers as we expand

4.2 Data Shared with Providers

• Your prompts and conversation messages
• Model configuration parameters
• Request metadata (timestamp, model selection)
• Authentication tokens (when using your own API keys)

4.3 Provider Data Policies

Each provider has their own data handling practices. We recommend reviewing their privacy policies:

• Some providers may use your data to improve their models unless you opt out
• Data retention periods vary by provider
• Some providers offer enterprise agreements with enhanced privacy protections
• Geographic data processing locations may differ

5. Data Storage and Security

5.1 Data Storage

• Database: PostgreSQL with encrypted sensitive fields
• Cache: Redis for temporary session and performance data
• Backups: Regular encrypted backups with retention policies
• Geographic Location: Data stored in secure cloud infrastructure

5.2 Security Measures

• Encryption: TLS for data in transit, encryption at rest for sensitive data
• Access Controls: Role-based access with principle of least privilege
• Authentication: Secure authentication via Clerk, API key management
• Monitoring: Real-time security monitoring and alerting
• Audit Logs: Comprehensive logging of system access and changes
• Regular Updates: Security patches and vulnerability management

5.3 Data Retention

• Chat History: Stored until you delete or account termination
• Usage Analytics: Retained for 2 years for billing and compliance
• Account Data: Retained while account is active
• Support Data: Retained for 3 years after resolution
• Log Data: Automatically deleted after 90 days

6. Data Subject Rights

You have the following rights regarding your personal data:

• Access: Request information about data we process
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Objection: Object to processing for legitimate interests
• Withdraw Consent: Withdraw consent where applicable

To exercise these rights, contact us through our support channels. We will respond within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Authentication, security, basic functionality
• Analytics Cookies: Usage statistics and performance monitoring
• Preference Cookies: User settings and interface preferences

You can control cookies through your browser settings, but this may affect service functionality.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. When we transfer data internationally, we use appropriate safeguards such as:

• Standard contractual clauses
• Adequacy decisions by relevant authorities
• Certification schemes
• Provider-specific privacy frameworks

9. Children's Privacy

Our service is not intended for children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will provide notice before your data is transferred and becomes subject to different privacy practices.

11. Legal Disclosure

We may disclose your information when required by law or to:

• Comply with legal process or government requests
• Protect our rights, property, or safety
• Protect users or the public from harm
• Investigate fraud or security issues
• Enforce our terms of service

12. Privacy Policy Updates

We may update this Privacy Policy periodically. Material changes will be communicated via:

• Email notification to registered users
• Platform notifications
• Updated "Last modified" date on this page

Continued use of the service after changes constitutes acceptance of the updated policy.

13. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

14. Contact Information

For privacy-related questions, concerns, or requests, please contact us through:

• Our support channels available on the platform
• The contact information provided in your account dashboard
• Email support with "Privacy" in the subject line

We are committed to addressing your privacy concerns promptly and transparently.