How we handle your data

Prompts and replies. Processed in memory on the GPUs that serve the request. They are not stored and Aleroy staff cannot read them.

What we keep. For each request: its ID, the model and deployment, timing, token counts and outcome. These support billing, tracing and support. Customers see request metadata for 30 days. Billing records are kept for at least six months after settlement.

Where requests run. Only on the deployments a customer is allowed to use. If none is available the request is refused; it is never sent to another site.

Keys. API keys are shown once when created and stored only in a form that cannot be read back. Support never sees, rotates or creates a customer's key.

Support conversations. Messages you send us are kept in our support tools. Do not paste secrets or prompt content. If a key is pasted into a conversation, we treat it as leaked and ask for it to be blocked and replaced.