Privacy Policy
01 Introduction
LLM Resayil ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data when you use our API and web portal at llm.resayil.io.
02 Data We Collect
| Category | Data | Purpose |
|---|---|---|
| Account | Name, email, phone number | Registration, OTP verification, support |
| Usage logs | Model name, token count, credits deducted, timestamp | Billing, dashboard, rate limiting |
| Payment | Transaction ID, payment status (from MyFatoorah) | Credit top-up confirmation |
| Session | Session cookies, locale preference | Authentication, UI language |
We do not collect advertising data, browser fingerprints, or third-party tracking identifiers.
03 How We Use Your Data
- Authenticate your account and verify your phone number via WhatsApp OTP
- Process payments and top-up credits via MyFatoorah / KNET
- Track API usage for billing, rate limits, and dashboard display
- Send transactional WhatsApp messages (OTP codes, payment confirmations)
- Respond to support enquiries submitted via the contact form
We do not sell your data. We do not use your data for advertising, profiling, or any purpose beyond operating the Service.
04 API Request Content
We do not store the content of your API requests (prompts) or model responses. Usage logs record only metadata — model name, token count, credits deducted, and timestamp.
Your prompt data is forwarded directly to the model inference server and is not persisted to any database or log file.
05 Third-Party Services
06 Data Retention
- Account data — retained while your account is active
- Usage logs — retained for up to 12 months for billing and support
- OTP codes — expire after 10 minutes and are deleted after use or expiry
- Session data — expires after 2 hours of inactivity
You may request deletion of your account and associated data by contacting us via the contact form. We will process requests within 14 business days.
07 Security
All data is transmitted over HTTPS (TLS 1.2+). API keys are hashed using bcrypt and never stored in plain text. Database access is restricted to authorised server processes only. We do not store payment credentials.
08 Your Rights
You have the right to access, correct, or delete your personal data at any time. To exercise these rights, use our contact form. We will respond within 14 business days.
09 Policy Updates
We may update this policy periodically. The "last updated" date above will reflect changes. Continued use of the Service after changes constitutes acceptance of the updated policy. Material changes will be communicated by email or portal notice.
10 Contact
Privacy questions or data requests: contact form.