About this Policy
This Privacy Policy explains how Denizen Blu, LLC (“Denizen Blu,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use www.denizenblu.com, our playground, applications, console, API (api.denizenblu.com), and related services (the “Services”). It is part of our Terms of Service, and capitalized terms not defined here have the meaning given there. By clicking to accept our Terms of Service and Privacy Policy, creating an Account, or using the Services, you acknowledge that you have read this Policy. If you do not agree with it, do not use the Services.
This Policy does not apply to personal information we process on behalf of an Enterprise or other organizational customer under a separate agreement. That agreement governs that data.
The short version
- We do not run every Model ourselves. Many Models run on infrastructure we operate. Others are served by third parties, such as AI gateway providers and the developers of proprietary Models. When your request goes to a third party, your prompt and the response go to them (Section 1).
- Even when we run a Model, the hardware may not be ours. We may use machines we own, GPUs we rent from other companies, or both. We decide which, and it can change between requests (Section 1).
- We never charge per token, but we do record token counts and other usage data to run the service and enforce fair use.
- We do not sell your personal information, and we do not use your prompts or outputs to train models unless you give us separate permission. Third-party Model providers may have different practices (Section 4).
- You have choices and rights, described in Section 9.
1. How the Services Are Delivered, and Who Handles Your Data
Denizen Blu is an inference and routing platform. We do not host every Model we offer. Even for Models that we do run ourselves, we do not necessarily own the hardware they run on, although sometimes we do. We use a mix of the three setups below, and each one affects who can see your Inputs (your prompts and files) and Outputs (the responses).
Which Models are which. Most of the Models we offer are open-weight Models, and we run these ourselves, on our own hardware or on rented compute. Some Models, including some proprietary Models, are provided by third parties and are served by them, either directly or through an AI gateway that forwards your request to one or more further providers. We do not currently identify which Models are served by a third party, and the arrangement for any Model may change at any time. You should assume that any Model may be served by a third party unless an Organizational Plan agreement states otherwise in writing.
| Where your request runs | Who owns and operates the hardware | Who runs the Model software | Who receives your Input and Output |
|---|
| Our own hardware | Us, using our own CPUs and GPUs | Us | Us only |
|---|
| Rented or leased compute | A third-party cloud, data-center, or GPU provider | Us | Us. The hardware provider hosts the machines and may have infrastructure-level access to them under its agreement with us, but we run the software that processes your request. |
|---|
| A third-party model provider or AI gateway | The provider, and any upstream provider it uses | The provider | The provider, and any further provider it routes to, under that provider’s own terms and privacy practices. |
|---|
We choose the route. We decide, request by request, where your request runs, and we may change that at any time without notice. Our routing system (which we call Conduit) may send two requests from you to two different setups. Unless you have an Organizational Plan that says otherwise, you cannot choose the provider, region, or hardware.
What this means for your privacy. This Policy describes what we do with your information. When your request is served by a third party, that party also receives your Input and Output and handles them under its own terms. It may log them, keep them for a period, or, depending on its terms, use them to improve its own products. We choose providers with care and prefer providers that commit not to train on API content, but we cannot control what an independent provider does.
When we run a Model on rented compute, the hardware owner is a service provider to us. It is not given your Inputs or Outputs as content to use for itself, but it hosts the machines they run on.
Your information may be processed in the United States and in other countries where our own machines, our rented capacity, or our providers’ machines are located (see Section 10).
2. Information We Collect
2.1 Information you give us
- Account and contact information: your name, email address, password or sign-in credentials, and any profile details you add.
- Billing information: your plan, billing history, and billing address. Payments are handled by our payment processor, Stripe. We do not receive or store your full card number.
- Inputs: the prompts, messages, files, images, audio, and other content you send to a Model, including content you include in API requests.
- Saved content: conversations, notebooks, datasets, and files you choose to save in your Account.
- Communications: messages you send to us, such as support requests, and your survey and feedback responses.
- Feedback: ratings or comments on an Output, and the related conversation.
2.2 Information we generate or receive automatically
- Outputs: the responses Models generate for you.
- Usage and telemetry: the Model you used, timestamps, the number of requests, token counts, request size and latency, error codes, concurrency, and similar data. We use these to run the Services, manage capacity, and enforce our Fair Use Policy. They are not used to bill you per token.
- Device and log data: your IP address, browser and device type, operating system, language, referring pages, and the pages and features you use.
- Approximate location: a general location derived from your IP address, used for security, fraud prevention, and routing.
- Cookies and similar technologies: see Section 6.
2.3 Information from others. We may receive information from your sign-in provider if you use single sign-on, from our payment processor (such as confirmation of payment or a fraud flag), and from security and fraud-prevention services.
2.4 Voice, face, and other sensitive inputs. Some Models accept or generate audio, images, or video. Audio or images that show an identifiable person, including voice recordings, may be treated as biometric information under some laws. Do not submit another person’s voice or likeness unless you have their permission and the right to do so. Do not submit sensitive information that you do not need to submit, such as health records, government identifiers, or payment card numbers. Individual Plans are not designed for regulated data.
3. How We Use Information
We use personal information to:
- Provide the Services: create and manage your Account, route your requests to a Model, return Outputs, store content you choose to save, and process payments.
- Operate and protect the platform: manage capacity, enforce concurrency and fair-use limits, check that use is Interactive Use, troubleshoot, and keep the Services secure.
- Prevent abuse and fraud: detect and investigate violations of our Terms, spam, unauthorized access, trial abuse, and unlawful activity.
- Communicate with you: send service notices, security alerts, billing messages, and responses to your support requests, and, where you have not opted out, product news.
- Improve the Services: analyze aggregated or de-identified usage to understand which features and Models people use and to fix problems. Section 4 explains why this does not include training Models on your content.
- Comply with law and protect rights: respond to legal requests, enforce our agreements, and protect our rights, property, and safety and those of others.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Your Prompts and Outputs: Training, Retention, and Where They Go
4.1 No training by us. We do not use your Inputs or Outputs to train or fine-tune any Model unless you give us separate, express permission, for example when you submit Feedback and agree that we may use it.
4.2 What we keep. Unless you save a conversation or other content in your Account, we do not retain the content of your Inputs and Outputs after your request completes. We keep usage telemetry (Section 2.2). We may keep request content for up to 30 days where needed to investigate abuse, security incidents, or legal claims, or where the law requires. Conversations you save stay until you delete them. After you delete a conversation or close your Account, we remove it from our active systems within 30 days, except where we must keep it for legal, security, or fraud-prevention reasons, and it may remain in backups for a limited time.
4.3 Third-party Models and providers. When a Model is served by a third-party model provider or AI gateway (see Section 1), we must send your Input to that provider for it to respond. The provider then handles your Input and Output under its own terms. Depending on the provider and the Model, it may log, retain, review for safety, or, in some cases, use them to train or improve its own Models. Because we do not currently tell you which Models are served by a third party, you should assume that any Model may be, and you should not submit content that you are not willing to have a third-party provider receive. If you need to be sure that your data stays on systems we operate, contact support@denizenblu.com about an Organizational Plan. Where a provider is a chain of providers, each may receive your data. We are not responsible for a third party’s independent use of your data, but we require providers to follow applicable data protection law and, where we can, to limit use of your data to providing the service.
4.4 Rented hardware. When your request runs on GPUs we rent from another company, the company that owns the hardware does not receive your Inputs or Outputs as content to use for itself. It does host the machines, and our agreement with it limits what it may do with data on them. We run the software that processes your request.
4.5 Safety and abuse review. We may review Inputs and Outputs, using automated tools and, where needed, our staff, where we reasonably believe it is necessary to investigate abuse, a security incident, or a violation of our Terms, or to respond to legal process.
4.6 Shared and public content. Anything you choose to publish or share, such as a shared conversation link, may be seen by others. Do not share what you want kept private.
5. Who We Share Information With
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only in these cases:
- Third-party model providers and AI gateways, as described in Sections 1 and 4, when your request is served by them. This includes your Input and the Output.
- Compute and hosting providers, such as the cloud, data-center, and GPU providers whose capacity we rent, and providers of storage, networking, monitoring, and email. They process information on our behalf and under our instructions.
- Payment processors, such as Stripe, to process your payments and prevent fraud.
- Analytics and security providers, such as Google, to understand how the site is used and to protect it.
- Your organization, if you signed up with an employer or school email address and the organization has claimed your Account.
- Professional advisers, such as lawyers, accountants, auditors, and insurers, where needed.
- Authorities and other parties, where we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of you, us, or others, or to detect and prevent fraud, abuse, or security problems.
- A successor, if we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, in which case your information may be transferred as part of that transaction.
- Others with your consent or at your direction, for example when you connect a third-party tool or client to your API key.
We may also share aggregated or de-identified information that does not identify you. We will not try to re-identify it.
6. Cookies and Analytics
We use cookies and similar technologies for four purposes: to keep you signed in and secure your session (strictly necessary); to remember your preferences, such as language (functional); to understand how the site is used (analytics); and to detect fraud and abuse. We use Google Analytics, a web analytics service provided by Google. It uses cookies and similar technologies to collect information about how you use our site, such as the pages you view, your device and browser, and your approximate location, and sends it to Google for processing. Google’s use of that information is governed by Google’s privacy policy (https://policies.google.com/privacy). You can opt out of Google Analytics by installing Google’s browser add-on (https://tools.google.com/dlpage/gaoptout) or by declining analytics cookies in our cookie settings. We do not use advertising cookies, and we have not enabled Google’s advertising features or Google Signals.
Most browsers let you refuse or delete cookies. If you disable strictly necessary cookies, parts of the Services will not work. We honor the Global Privacy Control signal where the law requires. Where the law requires consent for non-essential cookies, we ask for it through a cookie banner, and you can change your choice at any time using the cookie settings link in our website footer.
We do not respond to “Do Not Track” browser signals because there is no common standard for them.
7. How Long We Keep Information
We keep personal information only as long as we need it for the purposes in this Policy, and for legal, accounting, security, and dispute purposes. In general:
| Information | How long |
|---|
| Account and contact information | While your Account is open, then up to 30 days after closure |
|---|
| Billing and transaction records | As long as tax, accounting, and payment-network rules require |
|---|
| Saved conversations and files | Until you delete them or close your Account, then removed from active systems within 30 days |
|---|
| Request content (Inputs and Outputs) not saved | Not kept after the request completes, except as described in Section 4.2 |
|---|
| Usage telemetry and logs | Up to 72 months |
|---|
| Security and abuse records | As long as needed to protect the Services, and longer for banned Accounts |
|---|
When we no longer need information, we delete it or de-identify it. Third-party providers keep data under their own policies (see Section 4.3).
8. Security
We use technical and organizational measures designed to protect personal information, such as encryption in transit, access controls, and monitoring. No system is perfectly secure, and we cannot guarantee that information will never be accessed, lost, or disclosed. Our security measures apply to systems we operate. We cannot guarantee the security of third-party providers’ systems, although we require our service providers to protect the data they handle. Keep your credentials and API keys secret, and tell us promptly at support@denizenblu.com if you think they have been compromised. If a data breach affects you, we will notify you as the law requires.
9. Your Choices and Rights
9.1 Controls you have now. You can view and update your Account details, delete saved conversations and files, close your Account, and unsubscribe from marketing emails using the link in them. You also control what you submit. Because any Model may be served by a third party, do not submit content you are not willing to have a third-party provider receive.
9.2 Your privacy rights. Depending on where you live (for example California and other U.S. states with privacy laws, the European Economic Area, the United Kingdom, and Switzerland), you may have the right to:
- know and get a copy of the personal information we hold about you, including in a portable format
- correct inaccurate information and delete your information, subject to legal exceptions
- object to or restrict certain processing, and withdraw consent where we rely on it
- opt out of targeted advertising, sale, or profiling. We do not sell personal information or share it for targeted advertising
- appeal a decision on your request, where the law gives you that right
- complain to your data protection authority
We will not treat you differently because you exercise these rights.
9.3 How to ask. Email support@denizenblu.com from the address on your Account. We may ask for details to verify it is you. You may use an authorized agent, who must show proof of authority. We respond within the time the law requires, usually 30 to 45 days. To appeal a denial, reply to our response with the word “appeal.”
9.4 Limits on what we can do. We can act only on information we hold. We cannot delete data held by a third-party provider, including a model provider or gateway that served your request, and you may need to contact them directly. Because Models generate text by prediction, we cannot guarantee the accuracy of an Output about a person. If you find an Output about you that is wrong, contact us and we will make reasonable efforts to address it.
9.5 Legal bases (EEA, UK, and Switzerland). Where those laws apply, we process your information because it is necessary to perform our contract with you (to provide the Services), because of our legitimate interests (for example security, fraud prevention, and improving the Services, which we balance against your rights), to comply with legal obligations, and, where asked, with your consent. The controller of your information is Denizen Blu, LLC.
10. International Transfers
We are based in the United States. Our own hardware is hosted in the United States and overseas and is not limited to any one location. We also use rented compute, third-party model providers, and other service providers in various locations. Your information may therefore be processed in the United States and in other countries, which may have different data protection laws from yours. Where the law requires, we use safeguards for transfers out of the EEA, the UK, or Switzerland, such as the European Commission’s standard contractual clauses or an adequacy decision. Contact support@denizenblu.com for details. We cannot promise that a request will stay in any particular country unless an Organizational Plan says so in writing.
11. Children
The Services are for people 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, email support@denizenblu.com and we will delete it.
12. Changes to This Policy
We reserve the right to change this Privacy Policy at any time and from time to time, in our sole discretion. We will post the updated Policy at www.denizenblu.com/privacy with a new effective date. Changes take effect when posted, or on any later date the updated Policy states. For material changes, we may also notify you by email, in your Account, or with a notice on our website, and where the law requires, we will ask for your consent. It is your responsibility to review this Policy from time to time. Your continued use of the Services after changes take effect means you accept the updated Policy. If you do not agree, stop using the Services and close your Account. A change in how we use information you have already given us will not apply to that information unless the law allows or you consent.
13. Contact
