PRIVACY POLICY

1. Overview

CamelLayer ("we", "us", "our") operates the CamelLayer token optimization service. This policy describes what data we collect, how we use it, and the choices you have. By using CamelLayer, you agree to this policy.

We are committed to responsible data handling. Prompts sent to our optimization service may be stored and used for service improvement, model training, quality testing, and analytics.

2. Data We Collect

Prompts: Prompts sent to /api/v1/optimize may be stored on our servers and used for service improvement purposes including model training, optimization algorithm development, quality testing, and analytics. Prompts are not associated with personally identifiable information.

Email address: Collected when you purchase a license or create an account. Used for license delivery and support.

License keys: Stored securely and associated with your account. Used for authentication and rate limiting.

Usage metadata: We collect aggregate usage statistics per license key (request count, timestamps) to enforce rate limits (Free: 200 req/12h, Pro: 100 req/min). No prompt content is included in this metadata.

3. How We Use Data

• Delivering and operating the CamelLayer service
• Enforcing rate limits and plan restrictions
• Sending license keys and transactional emails
• Responding to support requests
• Improving service reliability and performance
• Training and improving optimization models
• Quality assurance testing
• Analyzing optimization effectiveness

We do not sell, rent, or trade your personal data to third parties.

4. Third-Party Services

Lemon Squeezy — Payment processing and subscription management.

Google Cloud — Infrastructure and hosting.

Firebase — Authentication and account management.

These providers only receive data necessary to perform their services and are contractually bound to protect your information.

5. Data Retention

We retain your account data (email, license key) for as long as your account is active. Usage metadata is retained for 90 days. When you delete your account, all personally identifiable data is deleted within 30 days.

Prompt content may be retained for up to 90 days for service improvement purposes. Anonymized or aggregated data derived from prompts may be retained indefinitely.

6. Your Rights

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing
• Data portability (where technically feasible)

To exercise any of these rights, contact us at [email protected].

7. Cookies

Our website uses minimal cookies. We do not use advertising or tracking cookies. Session cookies may be used for authenticated dashboard sessions. Third-party scripts (Lemon Squeezy) may set cookies as required for checkout functionality.

8. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be announced via email to registered users. The "Last updated" date at the top of this page reflects the most recent revision.

9. Contact

For privacy-related questions or requests, contact us at [email protected].