Privacy notice
Version of 10 November 2026.
1In one paragraph
We keep your email address and a record of how much you use the service. We do not keep the text you send to the models or the text they return, and we do not train on either. There are no advertising or analytics trackers on this site. The only cookies are the ones that keep you signed in.
2What we keep, and why
- Account
- Your email address, and your name if you sign in with Google. We use them to sign you in and to write to you about your account.
- Credentials
- API keys, sign-in links, session tokens and connection tokens are stored as hashes. We cannot read them back.
- Request records
- For each request: time, endpoint, model, size in words and tokens, cost, latency and status. We use them to show you your usage and to enforce limits.
- Server logs
- Our hosting provider keeps short-lived technical logs, including IP addresses, for security and debugging.
- Your text
- It is processed in memory to produce a response and is not written to our database or logs.
3Who else is involved
We use these processors, each for one purpose:
| Processor | Purpose | Sees your text |
|---|---|---|
| Railway | Hosts the website, console, API and database | In transit only |
| Fireworks AI | Runs QED and the claim check in compare | Yes, to process it |
| Modal | Runs Sic | Yes, to process it |
| Brevo | Sends sign-in emails | No |
| Cloudflare | Domain name service | No |
| Sign-in, only if you choose it | No |
Some of these operate outside the European Economic Area.
4How long
Account data is kept while the account exists. Write to us to delete your account, and we will delete it and its request records. Sign-in links expire after 15 minutes and sessions after 30 days.
5Your rights
You can ask for a copy of your data, for corrections and for deletion, and you can object to processing. Write to hello@etal-labs.com. If you are in the EU or the UK you may also complain to your data-protection authority.