Last updated: October 12, 2026
The data controller responsible for the personal data described in this policy is Deeprelay, Inc., a Delaware corporation with its principal office at 2261 Market St, San Francisco, CA 94114 and an additional office at 169 Madison Ave, New York, NY 10016. For privacy questions or to exercise your data-protection rights, use the privacy contact at the end of this policy.
We collect information you provide directly, such as your name, email address, and payment information when you create an account or use our services. We also collect operational data including API request metadata, service usage metrics, billing and usage records, and session information needed to run, secure, and bill the platform.
When you use our serverless inference services, we process the prompts and inputs you submit and the outputs generated in response in order to route, run, and return the request and to meter usage for billing.
Inference prompts and outputs are processed in memory to serve your request and are not stored. We do not write your prompts, messages, system prompts, tool definitions or arguments, model outputs, input images, or embedding inputs and vectors to our databases, logs, or error reports. Every upstream model provider that serves our traffic does so under a zero-data-retention agreement with us and does not store or train on your content.
Two features hold content briefly and delete it automatically: a video job keeps its prompt until shortly after the job finishes and its video for about three days, and a response sent with an Idempotency-Key is kept for about 24 hours so a retry is not charged twice. We retain the operational metadata required to bill usage, secure the platform, and meet our legal and accounting obligations, never the content of your prompts or outputs. Account, billing, and audit records are retained for as long as your account is active and for the period required by applicable law thereafter. Details are in our data policy.
We do not use your prompts, inputs, outputs, workload data, or models to train, fine-tune, or improve any machine-learning model of ours, and we do not sell your personal information or your workload data to third parties.
We use your information to provide and maintain our inference and cloud services, process payments, send service communications, secure the platform against abuse, and meet our legal obligations.
To deliver the services we rely on a limited set of Sub-Processors. We engage, by category, third-party providers of GPU compute and model-inference services to fulfil compute and inference requests on our behalf; we disclose these by category and do not identify individual upstream providers on this page, consistent with our privacy-by-design architecture that shields upstream provider identity from customers.
Our named first-party infrastructure Sub-Processors are: Amazon Web Services (AWS), region us-west-2, for application hosting and data storage; Stripe for payment processing; Resend for transactional email; and Clerk for authentication and identity. We also engage search providers, for the queries the web search tool sends on your behalf (see the data policy’s web search exception). The full, current list and our change-notice commitment are set out in our Sub-Processor Disclosure. Where we process personal data on a customer’s behalf, that processing is also governed by our Data Processing Agreement. An enterprise customer may request our detailed, NDA-gated Sub-Processor list.
Our primary application infrastructure is hosted in AWS region us-west-2 in the United States. Using our services may therefore involve the transfer of personal data across borders. Where we transfer personal data internationally, we do so under an appropriate legal transfer basis (including contractual safeguards with our Sub-Processors) designed to provide an adequate level of protection for your data.
We implement industry-standard security measures to protect your data, including encryption in transit and at rest. Access to personal data is restricted to authorized personnel only.
Deeprelay, Inc. is the data controller for your personal data. For privacy questions or to exercise your data-protection rights, contact our privacy contact at privacy@deeprelay.ai, or write to us at either of our offices: