privacy policy

Zero data retention, by design.

Logits does not store your prompts or outputs. This policy explains what we do keep to run and bill the service, for how long, and who can see it.

Effective date: October 27, 2026.

Your prompts and outputs

“Content” means everything you send to the API and everything it returns: messages, instructions, files, images, tool calls and model outputs.

  • We do not store Content. It is held in memory only while your response is generated, then discarded. It never reaches our databases, logs, analytics or backups.
  • This applies to every account and every request, including traffic that reaches us through an API router or gateway. There is no setting that turns retention on.
  • We do not train, fine-tune or evaluate models on Content, and we do not let anyone else do so.
  • No one at Logits can read your Content, because none is kept.
  • Models run on GPU infrastructure dedicated to Logits. We do not forward Content to another model provider.
  • To speed up related requests, the inference engine may keep recent prompt prefixes in GPU memory for a short time. This cache is never written to disk, is not readable by anyone, and is evicted automatically.
  • Stored responses are not offered: the Responses API requires store: false and does not accept previous_response_id.

What we keep

None of the records below contain Content.

  • Account information. Your email address and whether it is verified, a display name, and the identifier from our sign-in provider. API keys are stored only as one-way hashes. Kept: until you close your account.
  • Usage records. For each billed request: request ID, account and API key ID, model, token and image counts, price, charge and timestamps. A one-way hash of the request detects duplicate submissions; it cannot be turned back into the request. Kept: as long as accounting, tax and legal obligations require.
  • Performance metrics. Latency, generation speed, status and error codes for each request, shown to you in the console. Kept: 90 days.
  • Service logs. One line per request with its ID, route, model, status and outcome. No request or response body, prompt, credential or header. Kept: 15 days.
  • Payments. Payments and saved cards are handled by our payment processor. We receive payment confirmations, not your full card number. Kept: as long as accounting, tax and legal obligations require.
  • Website and console analytics. Pages viewed and features used, linked to your account ID after you sign in, and session replays with every input field masked. Never your Content or API keys. Kept: up to 12 months.
  • Contact requests. If you use our contact form, your name, email address, company and message go to our customer relationship management (CRM) system so we can respond, and your email address and company are added to your analytics profile. The custom-evaluation request form is hosted by a third-party form provider. Kept: until you ask us to delete them.

Database backups are kept for 7 days, so data deleted from the live database is gone from backups 7 days later.

Who can see it

  • You can see your own usage, charges and performance history in the console.
  • Authorized Logits staff can view account, usage and billing records when they need to operate, bill or support the service. Changes to account settings record who made them and why.
  • We do not sell or rent personal information.

Service providers

We use service providers only to run the service, under contracts that limit them to that purpose:

  • Cloud hosting and database: the records above.
  • GPU hosting: Content, only in memory while a response is generated, under the same zero-retention terms.
  • Sign-in: your email address and sign-in identifiers.
  • Payments: payment and card details, purchase amounts.
  • Analytics, logging and monitoring: records without Content.
  • CRM: what you submit in the contact form.
  • Website analytics: pages visited and how you arrived.
  • Team messaging: sign-up requests, for manual approval.

Where we process data

Our servers and database are in the United States. Some models are served from data centers in the United Kingdom. Content stays in memory in whichever location serves your request and is not stored in either.

If you are outside the United States, your personal information is transferred to the United States and the United Kingdom. We protect these transfers with appropriate safeguards, such as standard contractual clauses.

Why we process it

  • To provide the service and bill for it, under our contract with you.
  • To keep the service secure, prevent abuse and improve it, based on our legitimate interests.
  • To meet accounting, tax and other legal obligations.
  • For non-essential cookies and marketing, with your consent where the law requires it.

Cookies

The website and console use cookies and browser storage to keep you signed in, to measure how they are used, and to connect a contact request to the page you came from. The website also loads a third-party web analytics service. Where the law requires consent for non-essential cookies, we ask for it first. You can block or delete cookies in your browser; the console needs its sign-in cookie to work.

Security

Data is encrypted in transit and at rest. The database accepts only encrypted connections on a private network, and API keys are stored only as hashes.

Using Logits through a router

If you reach Logits through an API router, gateway or developer tool, that service's own privacy policy governs your relationship with it. We receive only what it forwards, and we handle that traffic exactly as described here: no Content is stored, and none is used for training.

Your rights

You can delete API keys in the console at any time. To access, correct, export or delete your personal information, or to close your account, email support@logits.com. We respond within 30 days. Depending on where you live, you may also have the right to object to or restrict processing and to complain to your data protection authority.

Changes and contact

The service is not intended for anyone under 18. We will post changes to this policy here and update the effective date, and notify account holders by email before a material change takes effect.

Logits Inc. operates Logits and is responsible for your personal information. Questions: support@logits.com.