Privacy Policy

Information we collect and process

Account information. When you create a live account, we store your email address, authentication identifiers, and basic profile and workspace metadata required to operate your account.

Billing information. If you purchase credits or a plan, our payment processor handles card data directly. We store the resulting plan, credit balance, usage charges, and transaction records, but never your full card number. The preview does not process payments.

API and workspace information. Live services process the project, API credential, model, and configuration information needed to authenticate requests, manage access, and attribute usage. Keep your API keys secret and do not include them in support messages.

Inference request content. When you submit a request through a live API or playground, we process only the prompts, relevant context, parameters, and other content needed to return the result you request. Your own application may separately store inputs and outputs; its data practices are your responsibility.

Operational metadata. Live services may record request identifiers, model names, token counts, timestamps, latency, status codes, and usage totals to provide request logs, billing, and reliability monitoring. Request metadata is distinct from prompt and response content. Our hosting infrastructure may also process connection information needed to deliver and secure the website.

How we use information

We use account and billing information to provide access to DreamGuard, bill for usage, send essential service communications, and prevent abuse. We use operational metadata to monitor reliability, improve performance, and provide usage reporting.

We process inference request content only to provide the result you ask for. We do not sell that content or use it to train models.

How information is shared

DreamGuard’s confidential inference service is designed to process model inputs and outputs inside hardware-isolated trusted execution environments (TEEs). The protections available for a live request depend on the endpoint, model, and client configuration documented for that service. Dashboard previews do not demonstrate or establish that a live request has been attested or encrypted.

We share information with service providers acting on our behalf, such as hosting, authentication, payment, and inference infrastructure providers, as needed to operate the services you use and under appropriate contractual protections. Where a selected service uses an external model provider, the applicable service documentation identifies that processing.

We may also disclose information when required by law, to protect rights and safety, or in connection with a corporate transaction.

Data retention

We retain account and billing information for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and accounting obligations. Operational metadata is retained as needed for usage reporting, security, and service operation.

Confidential inference is designed to process prompt and response content only for the time needed to complete a request, without retaining that content in request logs. Any different handling for a particular live feature will be disclosed before use. Copies retained by your application or integrations are subject to their own retention settings and policies.

You can clear the preview session by signing out or clearing your browser’s session storage. Preview settings held only in memory are reset when the page reloads.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete the personal information we hold about you. Contact us using the address below to exercise these rights. Preview controls do not submit live data requests or change live retention policies.

Security

We follow industry-standard practices to safeguard the account data we hold, including encryption in transit and access controls. Live confidential inference is designed to protect request content during processing using trusted execution environments and the encryption and attestation mechanisms described in the applicable service documentation.

No system is perfectly secure. We will notify affected users of a security incident materially affecting their data as required by applicable law.

Children

DreamGuard is not directed to children under 13 (or the applicable minimum age in your jurisdiction). If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email.

Contact

Questions about this policy or our handling of your data? Email privacy@opengradient.ai.