Privacy Policy.
In one line: we run GPU inference endpoints that serve open-weight language models. We do not store, log or read your prompts or the model's answers, and we do not train on them. Inference runs on GPU hardware in the United States.
1. Who we are
The controller is GGEZ Enterprise, osoba rizikového kapitálu, s.r.o., Proskovická 689/100, Výškovice, 700 30 Ostrava, Czech Republic, IČO 23173602, DIČ CZ23173602, registered at the Regional Court in Ostrava under file C 99342. Privacy contact: [email protected].
2. What we process when you call the API
| Data | Why | Kept |
|---|---|---|
| Prompt and generated text | carried in memory to compute the answer | not retained |
| Token counts, timestamps, model id | measuring usage and billing | as billing records |
| IP address, user agent | rate limiting and abuse prevention | short-lived |
Requests reach us through OpenRouter or directly. When OpenRouter routes a request to us it forwards the prompt; we return the completion. Nothing about your content is written to disk by our service.
3. Retention: none for content
Our inference server is started with request logging disabled and our gateway has no persistence layer — it reads the request, forwards it to the model, streams the answer back and keeps nothing. This is zero data retention (ZDR) for both input and output.
One technical nuance, stated so the claim stays exact: the model server keeps a key-value cache in GPU memory to accelerate repeated prompt prefixes. It is volatile working memory — not a log, not written to disk, and discarded as the cache is evicted or the process restarts.
4. No training, no sharing, no selling
We do not use your prompts or the model's outputs to train, fine-tune or evaluate models, and we do not sell or share them with anyone. There is no human review of request content.
5. Where processing happens
Inference runs on rented GPU instances located in the United States (Kansas). Our service therefore involves a transfer of personal data outside the EEA; where the GDPR applies, the transfer is covered by the European Commission's Standard Contractual Clauses with our infrastructure provider. If your use case requires processing to stay inside the EU, contact us before sending data — we would rather tell you plainly than have you assume.
Sub-processors:
- Thunder Compute — GPU infrastructure, United States. Supplies the machine; does not receive your prompts as content we log.
- OpenRouter — request routing and distribution, where you reach us through them.
6. Legal bases
Performance of a contract (Art. 6(1)(b) GDPR) for serving your requests and keeping billing records; legitimate interests (Art. 6(1)(f)) for rate limiting and preventing abuse; consent (Art. 6(1)(a) GDPR and section 89(3) of the Electronic Communications Act) for the analytics on this marketing website, which is off until you accept it.
7. This website
The pages at ggez.danielsuchan.dev ask for your consent to analytics before they load any. Until you accept, no Google Analytics or PostHog code is requested, no analytics cookie or local storage is written, and nothing is sent to Google or PostHog.
- Your choice. We store it in a first-party cookie named
consentfor 180 days. It holds only your answer (accept or decline) and is needed to avoid asking on every page. Declining and not answering have the same effect: no analytics. - If you accept, we load Google Analytics 4 (Google Ireland Ltd.;
Google may process data in the United States) and PostHog (EU cloud, Frankfurt). They set
cookies and local storage (
_ga*andph_*) and receive your IP address, page views, referrer, campaign parameters (utm, gclid) and clicks on our contact buttons. Ad personalisation stays off. - Withdrawing. Use the “Analytics settings” link in the page footer and choose Decline. Measurement stops and we remove the analytics cookies and storage we can reach from the page; remaining ones expire on their own, or you can delete them in your browser.
- Server logs. Our web server logs each request (IP address, time, page, user agent) to keep the site secure and to count visits without cookies. The report is anonymised and the raw logs are not published.
The API endpoints set no cookies at all.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent for this website's analytics at any time. Write to [email protected]. You may also complain to the Czech supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.cz.
9. Security
Traffic is encrypted in transit (TLS). Inference runs as an isolated single-tenant process on a machine we control; there is no shared content store between customers, because there is no content store.
10. Changes
If this policy changes materially we will update the effective date above. The rules for using the service are in our Terms of Service. Questions about any of it: [email protected].