Legal—Privacy Policy

Privacy Policy

LLMLayer Company LLC ("LLMLayer," "we," "us," or "our") operates llmlayer.ai and provides API services for AI agents. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

Our Core Privacy Principle

We do not store, log, or retain the content of your API requests (search queries, scraped content, documents, or AI conversations). Your data is processed in real-time and immediately discarded. We never use your data to train models or for any purpose beyond providing the API response.

1Overview

LLMLayer provides web search, content scraping, document processing, and AI-powered response APIs. We collect minimal information necessary to provide these services and bill for usage.

2Information We Collect

2.1 Account Information

Email address — for account creation and communication
Password — stored using secure hashing (bcrypt)
Name — optional, for personalization
Company name — optional, for business accounts

2.2 Payment Information

Billing details — processed by Stripe (our payment processor)
Billing address — for tax purposes

Important: We do not store credit card numbers. All payment processing is handled by Stripe.

2.3 Usage Data

We collect minimal operational data for billing and service operation:

API request counts — number of requests per endpoint
Timestamps — when requests were made
API key identifiers — which key made the request (not the key itself)
Error types — technical error codes (no content)
IP addresses — for rate limiting and abuse prevention

2.4 Technical Data

Browser type and version
Operating system
Device type
Pages visited on our website

3What We Don't Store

Zero Content Storage

The following data is NEVER stored, logged, or retained:

Your search queries

Websites you scrape

Content extracted from websites

PDFs or documents you process

YouTube transcripts you request

AI prompts you send

AI responses generated

Any payload content in API requests

Any response content we return

Why this matters: Your proprietary data, user information, and intellectual property remain completely private. We process requests in real-time and immediately discard all content data.

No Model Training: We never use your data to train, improve, or develop any AI models or systems. Your data is never sold or shared with third parties for any purpose.

4How We Use Information

We use the information we collect only for:

4.1 Service Delivery

Processing your API requests
Authenticating your account and API keys
Calculating usage for billing

4.2 Communications

Sending account-related emails (verification, password reset)
Billing notifications and receipts
Important service updates
Responding to support requests

4.3 Security

Detecting and preventing fraud or abuse
Enforcing rate limits
Monitoring for unusual activity

4.4 Service Improvement

Analyzing aggregated usage patterns
Understanding which APIs are most used
Identifying and fixing bugs

Note: Improvement analysis uses only anonymized metadata, never request content.

5Information Sharing

5.1 Service Providers We Use

Stripe — Payment Processing

stripe.com/privacy

What we share: Email, billing address, payment details

Why: Process payments and manage subscriptions

LLM Providers — AI Responses

Providers: OpenAI

What we share: Only when you use the Answer API — your prompts are sent to the selected model provider

Why: Generate AI responses

Note: Each provider has their own data policies. Review them before using the Answer API.

5.2 Legal Requirements

We may disclose information if legally required:

Court orders or subpoenas
Law enforcement requests
Compliance with applicable laws
Protection of our rights or safety

5.3 What We Never Do

We will NEVER:

Sell your personal information
Share your API request content with anyone
Use your data for advertising
Share data with data brokers

6Data Security

We implement security measures to protect your information:

6.1 Security Measures

Encryption in transit

All data transmitted using HTTPS/TLS

Password security

Passwords hashed using bcrypt

API key security

Keys are hashed and never stored in plain text

Access controls

Limited employee access to systems

Secure infrastructure

Modern hosting with security best practices

6.2 Your Responsibilities

Keep your password secure
Never share your API keys
Use strong, unique passwords
Report any unauthorized access immediately

6.3 Data Retention

Account data	Until you close your account + 90 days
Billing records	7 years (required by tax law)
Usage metadata	90 days
Error logs	30 days
Request content	Zero retention — never stored

Limitation: While we implement security measures, no system is 100% secure. You use the Services at your own risk.

7Your Privacy Rights

You have the following rights regarding your data:

7.1 Access

Request a copy of the personal information we have about you.

7.2 Correction

Update inaccurate information through your account settings or by contacting us.

7.3 Deletion

Request deletion of your account and personal information (subject to legal requirements).

7.4 Opt-Out

Unsubscribe from marketing emails using the link in any email or by contacting us.

7.5 California Residents (CCPA)

If you're in California, you have additional rights:

Right to know what information we collect
Right to delete your information
Right to opt-out of sale (Note: We don't sell your data)
Right to non-discrimination

7.6 European Residents (GDPR)

If you're in the EU/EEA, you have additional rights:

Right to access and portability
Right to rectification
Right to erasure
Right to restrict processing
Right to object
Right to lodge a complaint with supervisory authorities

7.7 How to Exercise Rights

8Cookies and Tracking

We use essential cookies for:

Authentication (keeping you logged in)
Session management
Security

You can disable cookies in your browser settings, but this may affect your ability to use certain features.

9Children's Privacy

Our Services are not intended for anyone under 18. We do not knowingly collect information from children under 18. If we discover we have collected information from a child under 18, we will delete it immediately.

If you believe we have information from a child under 18, contact us immediately at privacy@llmlayer.ai.

10Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

We'll update the "Last Updated" date
We'll notify you by email for significant changes
Your continued use after changes means you accept them

11Contact Us

For privacy questions or concerns, contact us:

Mailing Address

LLMLayer Company LLC
30 N Gould St STE R
Sheridan, WY 82801
United States

BY USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.