Privacy Policy
1. What we collect
Account identity, payment records, usage metering (timestamps, resource ids, token counts), device/log data for security. Prompt and completion payloads are retained max 30 days for abuse review unless you enable zero-retention in Settings.
2. What we never do
No sale of personal data, no advertising profiles, no training on customer prompts, datasets or fine-tuned weights. Aggregated, anonymized market statistics (e.g. the EX5CI index) contain no user data.
3. Processors & transfers
Payment processors (Stripe), cloud log storage in the EU. Transfers outside the EEA use SCCs. Host operators never see your data — workloads run in encrypted, isolated containers.
4. Your rights
Access, rectification, deletion, portability and objection under GDPR; equivalent rights under Turkish KVKK. Requests to privacy@ex5.ai are answered within 30 days. Deleting your account purges personal data within 90 days.