Privacy policy

This is a draft outline. The final text is pending counsel review and will be published before the API opens.

The final policy will cover the headings below. Where we already know a commitment, it is listed.

Who is responsible#

• Thinqit B.V., Vanadiumweg 25, 3812PX Amersfoort, the Netherlands (KvK 99883813), is the controller for account and billing data.
• For the content of API requests, Thinqit B.V. is a processor for its customers. That is covered by the data processing agreement, not by this policy.
• Contact for privacy questions: legal@thinqit.io. General contact: hello@thinqit.io.

What we collect#

• Account data: your email address, and the name, company, country and VAT id you choose to add.
• Sign-in: one-time sign-in codes sent to your email address.
• Billing data: top-ups, invoices and your balance. Card and bank details are handled by Stripe, not by us.
• Request metadata: request id, timestamps, account and key ids, model, serving path, token counts, charge, latency, status, error code, number of questions per type, SDK name and version, your client request id, and your IP address truncated to /24 (IPv4) or /48 (IPv6).
• Request content: not stored, unless the account owner turns on content logging.

How long we keep it#

• Request metadata: 30 days.
• Billing records: 7 years, as Dutch tax law requires.
• Opt-in content logs: the retention the owner chooses, from 1 to 30 days. Turning logging off deletes existing logs within 1 hour.
• Account data: for as long as the account exists. The final text will set the period after closure.

Where it is processed#

• In the EU. See Data handling and residency and the subprocessor list.

Cookies#

• The console uses one session cookie to keep you signed in.
• The final text will list every cookie on the website and the console.

Your rights#

• Access, correction, deletion, restriction, objection and data portability under the GDPR, and how to use them.
• Your right to complain to a supervisory authority, such as the Dutch Autoriteit Persoonsgegevens.

No training on your data#

• Customer content is never used to train, tune or calibrate any model.