Privacy Policy

1. Information We Collect

We collect information that you provide directly, information from third-party integrations, and data generated through your use of the Service. This includes:

• Account & Profile Data: Email address, name, organization, and settings supplied during Clerk-authenticated sign-up or when updating your profile.
• Billing & Transaction Data: Subscription selections, payment method tokens, invoices, and transaction confirmations processed by Stripe, Paddle, or Gumroad.
• License & Device Data: License keys you generate, activation history, machine identifiers, IP addresses, and verification logs captured through our license APIs.
• Operational Content: Customer conversations, knowledge base articles, and configuration data that you upload or generate within the Service.
• Usage & Technical Data: Log files, diagnostic events, browser type, device type, operating system, and pages or features accessed. We collect this via cookies, local storage, and similar technologies.
• Communications: Support requests, feedback, and email correspondence sent through AWS SES, Resend, or SendGrid providers.

2. How We Use Information

We use the information we collect to:

• Authenticate users and secure accounts via Clerk
• Provision license keys, manage device limits, and verify activations
• Process payments, renewals, and refunds
• Send transactional communications, alerts, and onboarding emails
• Improve Service performance, develop new features, and maintain security
• Comply with legal obligations and enforce our Terms of Service

3. Legal Bases

Where required by applicable law, we rely on the following legal bases: (a) performance of a contract (providing the Service and processing payments); (b) legitimate interests (improving and securing the Service, preventing fraud, supporting customers); (c) compliance with legal obligations; and (d) consent, when you opt in to marketing or optional data uses.

4. How We Share Information

We share information with third parties only as necessary to operate the Service or comply with law. Recipients include: Clerk (authentication), payment processors (Stripe, Paddle, Gumroad), email providers (AWS SES, Resend, SendGrid), cloud hosting and database vendors (including PostgreSQL providers and Prisma tooling), analytics partners, and professional advisors. We may disclose information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets. We do not sell personal data.

5. Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, measure feature adoption, and secure the Service. You may adjust browser settings to block cookies, but essential cookies are required for core functionality such as authentication and license management.

6. Security

We employ administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including AES-256-GCM encryption for license materials, TLS for data in transit, audit logging, and least privilege access controls. Despite our efforts, no system can be guaranteed to be 100% secure, and you remain responsible for safeguarding passwords, API keys, and device credentials.

7. Data Retention

We retain personal data for as long as necessary to deliver the Service, comply with legal obligations, resolve disputes, and enforce agreements. License logs and device activation records are retained for audit purposes and may be anonymized or aggregated when no longer tied to active accounts. We will delete or anonymize data upon request where required by law.

8. Your Rights & Choices

Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal data, object to certain processing, or withdraw consent. You can manage most preferences through the dashboard or by contacting us at privacy@llmrepo.com. We will respond within 30 days or as required by applicable law. Marketing emails include unsubscribe instructions.

9. International Data Transfers

LLMRepo is headquartered in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored in, or processed in the U.S. or other countries. We implement appropriate safeguards, such as Standard Contractual Clauses, when transferring data from the European Economic Area, United Kingdom, or Switzerland.

10. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If we learn that we have collected data from a child without appropriate consent, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page, update the "Last updated" date, and notify you through the Service or by email when required by law. Your continued use of the Service after the update becomes effective constitutes acceptance of the revised policy.

12. Contact

For questions or concerns about this Privacy Policy or our data practices, contact LLMRepo's Data Protection team at 123 Sample Street, Wilmington, DE 19801 USA, or via email at privacy@llmrepo.com.