In short: we don't store the content of your API requests and responses, we don't use it to train models, we don't sell personal information, and our website uses no tracking cookies or analytics.
This Privacy Policy explains how The Zither Tech LLC (“Zither Tech”, “we”, “us”) collects, uses and shares information when you use our website zithertech.com, the console at api.zithertech.com and our API (the “Services”).
Information we collect
Account information
Your username, email address, password (stored only as a hash) and account settings.
Payment information
Payments are processed by Stripe, which collects your card details. We never receive or store full card numbers. We receive transaction details such as the amount, date and payment status, and limited billing details such as your name, email address, country, card brand and the last four digits of the card.
Usage records
For each API request we record metadata: the time, the account and API key used, the model, token counts, cost, duration and status. We may also record the IP address for security and abuse prevention.
API content
The prompts you send and the responses the models generate (“API content”) are processed only to produce the response. We do not write API content to our databases or logs, and we do not use it to train or improve models. To run the model, API content passes in memory through our API gateway and our GPU provider, listed below.
Server logs
When you visit the website or console, our servers may log standard technical information such as your IP address, browser type, the pages you request and the time, which we use for security and troubleshooting.
Communications
If you email us, we keep the correspondence so we can help you.
Cookies
zithertech.com uses no cookies, analytics or advertising trackers. The console uses cookies that are strictly necessary to keep you signed in.
How we use information
- To provide, operate and maintain the Services.
- To charge for usage and keep billing and tax records.
- To secure the Services and prevent fraud and abuse, and to enforce our Terms and Acceptable Use Policy.
- To send service notices and respond to support requests.
- To comply with legal obligations.
We do not sell or rent personal information, and we do not use it for advertising.
Service providers
We share information only with providers that help us run the Services, and only as needed for the purposes below.
| Provider | Purpose | Information |
|---|---|---|
| Akamai Technologies (Linode) | Hosting for the website, console and API gateway, in the United States | Account information, usage records, server logs; API content in transit |
| RunPod | GPU infrastructure that runs the models | API content while a request is processed |
| Stripe | Payment processing | Payment and billing information |
| Cloudflare | Domain name service (DNS) | DNS lookups only |
We may also disclose information when required by law or legal process, to protect the rights and safety of our users, the public or Zither Tech, or as part of a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different privacy policy.
Retention
- API content is not retained after the response is returned.
- Account information is kept while your account is open and deleted within 90 days after you close it, except where we must keep it longer by law.
- Usage and billing records are kept as long as needed for billing, tax and accounting obligations, generally up to 7 years.
- Server logs are kept for a limited period and deleted on a rolling basis.
- Database backups are kept for up to 14 days.
Security
Traffic to the Services is encrypted with TLS, passwords are stored as hashes, API keys can be revoked at any time, and access to our systems is restricted. No system is perfectly secure, so please keep your password and API keys safe.
Your rights
You can ask us to access, correct, export or delete your personal information by emailing support@zithertech.com. Depending on where you live, for example in the European Economic Area, the United Kingdom or California, you may have further rights, such as objecting to certain processing or complaining to a data protection authority. We will respond within 30 days, may need to verify your identity, and will not treat you differently for exercising your rights.
Where the GDPR applies, we process personal information to perform our contract with you, to meet legal obligations, and for our legitimate interests in securing and improving the Services.
International transfers
We are based in the United States and process information there. Our providers may process information in other countries where they operate.
Children
The Services are not intended for anyone under 18, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
We will post updates on this page and change the date above. For material changes, we will also notify you by email or in the console.
Contact
The Zither Tech LLC
support@zithertech.com