Privacy policy

OpenModel is a multi-model LLM gateway and operations platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website, console, API gateway, and other products and services (the "Services").

As an API proxy service, OpenModel routes your requests to upstream AI model providers. This policy also describes how your data flows through our platform to these providers.

This Privacy Policy describes your privacy rights. More information about your rights, and how to exercise them, is set out in Section 5 ("Your Rights and Choices").

1. Information we collect

We collect the following categories of personal data:

Account information

When you create an OpenModel account, we collect your email address. If you choose password-based authentication, we store a hashed password. If you sign in via a third-party OAuth provider (e.g., Google), we receive your email address and provider identifier. We may also collect or generate indirect identifiers (e.g., user IDs). We record your IP address at registration and at each login. A cryptographic hash of your email address is sent to Gravatar to display your profile avatar.

Payment information

If you purchase credits, we collect payment information necessary to process your transactions. Payment processing is handled by Stripe; we store only a transaction reference identifier and do not store payment card details on our servers.

API usage data

When you use our API gateway, we log request metadata including the model requested, token counts, cost, latency, status code, your IP address, and user-agent string. Your Inputs (prompts) and Outputs (model responses) are transmitted through our platform to upstream AI model providers for processing. We do not persistently store the content of your Inputs or Outputs.

Cookies and similar technologies

We use a small number of cookies: a language preference cookie and a cookie consent cookie. These are used solely to remember your settings. We do not use cookies for tracking or advertising. You can manage cookie preferences through your browser settings.

2. How we use your information

We use your personal data for the following purposes:

• To provide, maintain, and improve our Services, including routing API requests to upstream AI model providers;
• To process transactions and manage your account, including balance, billing, and recharges;
• To send you transactional communications, such as email verification codes and in-app account notifications;
• To monitor and enforce compliance with our Terms of Service and Usage Policy, based on request metadata and account activity rather than routine inspection of Input or Output content;
• To detect, prevent, and address fraud, abuse, security incidents, and technical issues;
• To analyze usage patterns and improve the performance and reliability of our Services;
• To comply with legal obligations and respond to lawful requests from public authorities.

API proxy data handling

As an API proxy, OpenModel transmits your Inputs to upstream AI model providers for processing and relays their Outputs back to you. We retain request metadata (such as model, token counts, and timestamps) for billing and service quality purposes. We do not use the content of your Inputs or Outputs to train our own models.

3. How we share your information

We may share your personal data in the following circumstances:

Upstream AI model providers

When you submit API requests, your Inputs are forwarded to the upstream AI model provider you have selected (or that has been selected by our routing system). These providers process your data according to their own privacy policies and terms. OpenModel does not control how upstream providers handle your data once it has been transmitted to them.

Service providers

We may share your data with third-party service providers who assist us in operating our Services, such as hosting infrastructure and payment processing (Stripe). These providers are expected to handle your data in accordance with their own privacy policies and applicable laws.

Legal requirements

We may disclose your personal data if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with legal obligations, protect our rights or safety, prevent fraud, or respond to government requests.

Business transfers

If OpenModel is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.

4. Data retention

We retain your personal data for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements.

Account information is retained for as long as your account is active. If you wish to delete your account data, please contact us at [email protected].

API usage logs and request metadata are automatically deleted after 180 days.

5. Your rights and choices

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

• Access You have the right to request a copy of the personal data we hold about you.
• Correction You have the right to request that we correct inaccurate or incomplete personal data.
• Deletion You have the right to request that we delete your personal data, subject to certain legal exceptions.
• Objection You have the right to object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law.

6. Data security

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit (TLS), password hashing using industry-standard algorithms, and access controls.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee the absolute security of your data.

7. International data transfers

OpenModel is based in Hong Kong. When you use our Services, your data may be transferred to and processed in countries other than your country of residence. By using our Services, you consent to the transfer of your data to these countries.

When we transfer data internationally, we take steps to ensure that your data receives an adequate level of protection in accordance with applicable data protection laws.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the effective date. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

9. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: [email protected]