Privacy policy

Novacloud Hosting, [address], Portugal. Contact: [privacy@novacloud-hosting.com].

Account data (email address, optional display name, password hash); subscription and plan data; API key metadata (never the secret key itself); usage metrics (requests, tokens, spend); and, where you subscribe, billing data processed by our payment provider.

Performance of our contract with you (providing the service and processing your subscription); our legitimate interests (security, abuse prevention, service operation); and your consent where applicable.

We use third-party processors to deliver the service, including: Stripe (payments), our hosting/infrastructure provider, the LiteLLM proxy that routes your model requests, and an email delivery provider. Each processes data on our behalf under a data processing agreement.

Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep account data for the life of your account and delete or anonymise it after account closure, subject to legal retention obligations. Usage detail is retained for a limited period for billing and operational purposes.

You have the right to access, rectify, erase, restrict and port your data, and to object to processing. You can export your data and delete your account at any time from Account settings. You may also lodge a complaint with the Portuguese supervisory authority, the CNPD (Comissão Nacional de Proteção de Dados).

We use strictly necessary cookies only: a session cookie to keep you signed in and a CSRF token cookie for security. We do not use advertising or tracking cookies.