1. Who is responsible for your data
Arlee Labs (arleelabs.com, app.arleelabs.com, and api.arleelabs.com) is operated by Arlee, LLC, a Delaware limited liability company (“Arlee”, “we”, “us”). Arlee decides how and why the personal data described in this policy is processed.
For privacy requests, write to admin@arleelabs.com. Details are in the “Your choices and requests” section.
The service is not intended for people under 18, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
2. Scope
This policy applies to arleelabs.com, the client portal at app.arleelabs.com, the Arlee Labs API at api.arleelabs.com, and support communications. Arlee Labs provides a unified gateway to third-party AI model providers.
Arlee, LLC processes data only as needed to operate accounts, fulfil API requests, calculate charges, maintain security, provide support, and improve the service.
3. Account and contact data
When you register or contact support, we may process your name, email address, messages, and information you voluntarily provide. Passwords are stored as cryptographic hashes and not in plain text.
Service tokens, timestamps, and protected cookies are used for email verification, account recovery, and authenticated sessions.
4. API usage data
For routing, request history, billing, diagnostics, and protection, we may retain the request time, selected model and provider, endpoint, status, duration, tokens or other billing units, cost, and API key identifier.
When you use the website, client portal, or API, the service may automatically process the IP address, user agent, browser or device type, network events, cookies, and visited routes. This information is used for authentication, rate limiting, fraud prevention, payment verification, and security.
Depending on the feature, sanitized encrypted request fragments and a short preview may be stored. Async job data, input files, and results may be retained temporarily until processing completes. Arlee Labs therefore does not claim Zero Data Retention for every operation.
5. Prompts, files, and outputs
Text, images, audio, video, and other request data are sent to the selected model provider to perform the task. The recipients depend on the selected model and available route.
Do not submit information that is unnecessary for the task, including passwords, payment credentials, government identifiers, or other sensitive data. Model providers may apply privacy and data-handling terms different from this policy.
6. Payment data
When you top up a balance, Arlee Labs and payment processors process a transaction identifier, amount, currency, exchange rate, status, date, and technical account and payment identifiers. Payment instrument and bank credentials (for example, a card number) are entered on the payment processor’s systems and are not received by Arlee Labs application code.
Card payments are handled by a third-party payment processor. The processor’s own terms and privacy policy apply to processing performed on its systems, and the processor may decide for itself how it uses the data it collects. From the processor we receive the payment status and the technical details needed to credit your balance, process a refund, or handle a dispute.
7. Purposes of processing
Data is used to:
- register users, authenticate sessions, recover access, and manage API keys;
- perform and route requests to models;
- calculate charges, maintain the internal balance, and process payments and refunds;
- prevent abuse, protect the service, and diagnose failures;
- provide support and send essential service notices;
- meet legal obligations, including accounting and tax duties.
8. Recipients and third-party services
Data may be disclosed only as needed for a specific function to AI model providers, our payment processor, hosting and traffic-protection providers, and email infrastructure. Data may also be disclosed when the law requires it or when needed to protect against fraud and abuse.
Arlee Labs does not sell personal data. Some recipients may operate in other countries; by sending a request to a selected model, you acknowledge potential cross-border processing by its provider.
9. International transfers
Arlee, LLC is a United States company, and our service providers and the recipients listed above may be located in the United States and other countries. Your data may therefore be processed outside the country where you live, where data protection laws can differ from yours. Where the law requires it, we use appropriate safeguards for such transfers.
10. Retention and security
Data is retained for as long as needed for the account, service delivery, accounting, security, payment disputes, and applicable obligations. Temporary job data is deleted or anonymized when it is no longer operationally required; certain payment and technical records may be retained longer to evidence transactions and prevent abuse.
Arlee Labs uses access controls, password hashing, encryption for selected records, and encrypted transport. No storage or transmission method can eliminate all risk.
12. Your choices and requests
You may request information about processing, correction of inaccurate data, account deletion, or restriction of processing where compatible with ongoing accounting, security, and transaction-evidence obligations. Depending on where you live, you may have other rights too, such as getting a copy of your data, objecting to processing, withdrawing consent, and complaining to a data protection authority. We will respond within the period required by applicable law.
Contact admin@arleelabs.com. Do not send a password or active API key. We may request the account email and safe transaction details to identify the request.
Data controller: Arlee, LLC, a Delaware limited liability company. Address: 2810 N Church St, STE 91730, Wilmington, DE 19802, USA.
13. Policy changes
A new revision is published at this permanent URL and applies from the date stated on the page. Material changes affecting account use may also be communicated through the website, client portal, or contact email.