1. Introduction
LLMTUNE Inc. ("we," "our," or "us"), a Delaware corporation, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our fine-tuning, inference, agent, and GPU compute platform (the "Service").
By using our Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name (if provided)
- Authentication credentials (OAuth tokens for GitHub/Google)
2.2 Model and Training Data
When you use fine-tuning or inference features, we process on your behalf:
- Datasets and prompts you submit for processing
- Model configurations and training parameters
- Fine-tuned model checkpoints and outputs
- Training job metadata and telemetry
2.3 Usage Data
We automatically collect information about how you use the Service:
- API requests, tokens processed, and inference latency
- Feature usage and interaction patterns
- Device information, IP address, and browser type
- Log files and diagnostic telemetry
2.4 Payment Information
We support multiple payment rails. Payment processing is handled by third-party processors; we never store credit card numbers. Depending on the rail you use:
- Card payments (Stripe): we receive billing address, payment method metadata, transaction history, and subscription status. Card data is entered and stored within Stripe's PCI-compliant environment.
- Cryptocurrency payments (NowPayments): we receive your payment identifier, the transaction hash, the asset type and amount, and the wallet address you pay from. On-chain transactions are public by nature.
- Agent payments (InFlow x402 rail): when an AI agent pays on your behalf, we receive the wallet address or balance account identifier, payment amount, and settlement metadata.
Cryptocurrency wallet addresses and payment identifiers are treated as personal data where they can be linked to you or your account.
3. How We Use Your Information
We use the collected information for:
- Providing, maintaining, and improving the Service
- Processing fine-tuning jobs and serving model inferences
- Managing your account, workspace, and billing
- Monitoring usage, performance, and security
- Sending service-related notifications and updates
- Responding to support requests and inquiries
- Complying with legal obligations and enforcing our Terms of Service
We do not use your prompts, datasets, model outputs, or fine-tuned models to train our own models or any third-party models. Your data is processed solely to deliver the Service you requested.
4. Data Storage and Security
4.1 Data Storage
Your data is stored on managed cloud infrastructure. Account and billing data reside on AWS (US region); the web application is served from Google Cloud; training and inference workloads run on decentralized GPU compute (IO.net) with NVIDIA acceleration. All data is encrypted in transit (TLS) and at rest.
4.2 Data Retention
- Account data: retained while your account is active; deleted within 30 days of account deletion, except where law requires longer retention.
- Billing and transaction records: retained for 7 years as required by tax and accounting law.
- Job inputs and outputs (prompts, datasets, checkpoints): retained while your account is active or until you delete them; deleted within 30 days of deletion request.
- Operational logs: retained up to 90 days for security, abuse prevention, and debugging.
You can delete your account and request data deletion at any time by contacting privacy@llmtune.io.
4.3 Security Measures
We implement industry-standard security measures including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Strict access controls with least-privilege permissions
- Confidential compute options for sensitive workloads
- Regular security reviews of infrastructure and code
In the event of a personal data breach affecting EU/UK residents, we will notify the relevant supervisory authority within 72 hours of becoming aware, and affected users without undue delay where the breach presents a high risk to you.
5. Data Sharing and Disclosure
We do not sell your data. We may share information only in the following circumstances:
- Service Providers: with trusted third-party providers who assist in operating the Service (see the Subprocessors list in Section 5.1)
- Legal Requirements: when required by law, court order, or government regulation
- Business Transfers: in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your data is transferred
- With Your Consent: for any other purpose you explicitly approve
5.1 Subprocessors
We currently engage the following categories of subprocessors:
- Cloud & hosting: Google Cloud (application serving), Amazon Web Services (database, US region)
- GPU compute: IO.net (decentralized compute network), NVIDIA (GPU hardware/acceleration)
- Payments: Stripe (card payments), NowPayments (cryptocurrency payments), InFlow (agent x402 payments)
- Logging & monitoring: Better Stack (operational logs and telemetry)
- Communications: transactional email providers
We will provide at least 30 days' notice (by updating this page) before adding or replacing a subprocessor that processes your personal data, during which you may object by contacting privacy@llmtune.io.
6. Your Rights
Depending on your location, you have the following rights:
- Access: request a copy of your personal data
- Correction: update or correct inaccurate information
- Deletion: request deletion of your data
- Portability: export your data in a machine-readable format
- Objection and restriction: object to or restrict certain processing (GDPR Articles 21 and 22)
- Withdraw consent: withdraw consent at any time where processing is based on consent (GDPR Art. 7(3))
- Opt-out of sale/sharing and marketing: unsubscribe from marketing communications; because we do not sell or share personal data for cross-context behavioral advertising, no CCPA opt-out is required, but you may opt out of marketing at any time
- Non-discrimination: exercising these rights will not degrade your service (CCPA Section 1798.125)
To exercise these rights, contact us at privacy@llmtune.io. We respond within 45 days (CCPA deadline); GDPR requests are answered within one month, extendable by two months for complex requests with notice to you.
EU/UK residents have the right to lodge a complaint with their local supervisory authority (e.g., the ICO in the UK, or the DPAs listed at edpb.europa.eu). California residents may also file a complaint with the California Privacy Protection Agency.
7. Cookies and Tracking
We use strictly necessary cookies and similar technologies to maintain your session, analyze usage, and improve the Service. We do not run third-party advertising or cross-site tracking cookies. For detailed information, see our Cookie Policy.
8. Children's Privacy
The Service is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it promptly.
9. International Data Transfers
Your information may be transferred to and processed in the United States and other countries other than your country of residence. Where we transfer personal data from the EU/UK to the United States, we rely on:
- The EU-U.S. Data Privacy Framework and UK Extension (where the recipient is certified), and/or
- The European Commission's Standard Contractual Clauses, supplemented by a transfer impact assessment and encryption safeguards
Business customers may execute our Data Processing Addendum, which incorporates the Standard Contractual Clauses.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
11. Contact Us
LLMTUNE Inc., a Delaware corporation
1007 N Orange St, 4th Floor, Wilmington, DE 19801, United States
Data protection inquiries: privacy@llmtune.io
General: support@llmtune.io