Who is responsible
Keak AI, Inc., 651 North Broad Street, Middletown, Delaware 19709, United States (“Keak,” “we,” “us,” or “our”) provides Cheaper Inference. This Privacy Policy applies to the Cheaper Inference websites, applications, APIs, account features, and related support services (the “Services”).
In this Policy, “personal data” means information that identifies or can reasonably be linked to an individual, including equivalent terms under applicable privacy law.
1 Scope and our privacy roles
- Keak acts as a controller or business for account, billing, website, product-analytics, security, sales, and support data that we process for our own business purposes.
- When a business customer submits personal data in prompts, files, or other inputs for processing through the Services, Keak generally acts as that customer’s processor or service provider. That processing is governed by our Data Processing Addendum and the customer’s instructions.
- This Policy does not govern the independent privacy practices of model providers, websites, or services that you choose to use outside the Services.
2 Personal data we collect
- Account and workspace data
- Email address, password hash, account verification state, workspace membership, roles, permissions, invitations, API-key name and prefix, and account settings.
- Billing and transaction data
- Wallet balance and ledger entries, top-up amount and status, auto-recharge settings, payment-processor identifiers, invoices or receipts, promotional credits, and billing-support records. Stripe processes payment-card details; Keak does not store full card numbers.
- Usage and operational data
- Model and endpoint, timestamps, request status, token or media usage, settled charge, API-key attribution, latency, error and provider-attempt data, and synthetic reliability-probe information.
- Security and device data
- IP address, approximate country, device type, browser or user-agent data, authentication and password-reset attempts, session information, and audit events used to protect accounts and the Services.
- Communications and business data
- Support messages and replies, contact requests, enterprise or pilot applications, company and role information, seller applications, feedback, survey responses, and related correspondence.
- Website, referral, and marketing data
- Pages viewed, interactions, referral codes, campaign and UTM parameters, signup entry point, approximate location, conversion events, local-storage identifiers, and advertising or analytics IDs.
We collect this information directly from you, automatically when you use the Services, from your workspace administrator, and from service providers or referral and business partners.
3 Inference inputs, outputs, and temporary files
- Prompts, images, files, and other inputs are transmitted to the model provider selected to serve a request. Generated outputs are returned to you through the Services. Provider processing is described in our Subprocessor list.
- Cheaper Inference does not store prompt or response bodies in its application database. We retain the operational and billing metadata described above so that we can settle charges, show request history, troubleshoot failures, secure the Services, and meet legal obligations.
- Images uploaded through the temporary vision-upload API are configured to expire after one hour. Private provider-download links are configured to expire after 15 minutes. You may delete an active upload sooner using the API.
- Upstream model providers may process or retain inputs and outputs under the contractual settings and retention practices applicable to their services. Do not submit data that the chosen model or provider is not authorized to process.
4 How we use personal data
- Provide accounts, workspaces, APIs, inference routing, and support.
- Authenticate users, manage API keys, and protect the Services from abuse.
- Authorize, reserve, settle, reconcile, and report wallet charges.
- Maintain request history, diagnose errors, and improve reliability.
- Operate, analyze, test, and improve the Services and customer experience.
- Communicate about accounts, security, billing, product changes, and support.
- Measure campaigns and market the Services, subject to applicable choices.
- Comply with law, enforce our agreements, and establish or defend legal claims.
We do not use customer prompt or response bodies to train Keak models. Aggregated or de-identified information may be used for analytics, capacity planning, security, and service improvement where it cannot reasonably identify an individual.
5 Legal bases for processing
Where the GDPR, UK GDPR, or similar law applies, our legal bases depend on the context:
- Contract: to create and administer accounts, process requests and payments, and provide support.
- Legitimate interests: to secure and improve the Services, prevent fraud, analyze use, conduct appropriate business-to-business marketing, and protect legal rights.
- Legal obligation: to maintain required financial records, respond to lawful requests, and comply with applicable law.
- Consent: for optional cookies, advertising, or communications where consent is required. You may withdraw consent at any time without affecting prior processing.
7 Cookies, local storage, analytics, and advertising
We use cookies and similar technologies to maintain sessions, remember settings, measure product use, attribute referrals, prevent duplicate conversion events, and understand marketing performance. Our public pages may use Google Analytics and Google Ads, Meta Pixel, X Ads, and Reddit Pixel. These providers may receive device, browser, page, interaction, IP, and advertising-identifier data under their own privacy notices.
You can limit non-essential tracking through browser settings and supported opt-out controls offered by those providers. You may also email support@keak.com to request that Keak stop disclosures for targeted advertising associated with your account or email address.
Keak does not sell personal data for money. Some disclosures to advertising and analytics providers may be considered a “sale,” “sharing,” or targeted advertising under certain United States state laws. Where those laws apply, you may opt out as described above. We do not knowingly sell or share the personal data of individuals under 16.
8 International data transfers
Keak and its service providers may process personal data in the United States, Canada, Europe, and other countries where they operate. Those countries may have different privacy laws from your jurisdiction. Where required, we use recognized safeguards such as adequacy decisions, contractual commitments, and the European Commission’s Standard Contractual Clauses. Our DPA includes additional transfer terms for customer personal data.
9 Data retention
We retain personal data only as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain security and financial records, resolve disputes, and meet legal obligations. Typical periods are:
| Category | Typical period |
|---|---|
| Account and billing records | For the account or contract term, then up to seven years. |
| Product and security logs | Generally 12 months, unless aggregated, anonymized, or needed longer. |
| Temporary vision uploads | Configured to expire after one hour; associated private links after 15 minutes. |
| Marketing contacts | Until opt-out or generally 36 months of inactivity. |
| Support, legal holds, and disputes | As needed to resolve the matter and satisfy legal requirements. |
Specific records may be kept for a shorter or longer period based on their sensitivity, contractual requirements, backup cycles, legal obligations, or an active dispute or investigation.
10 Security
We maintain technical and organizational safeguards designed to protect personal data, including access controls, encryption in transit, encryption at rest for applicable systems, logging, incident response, security training, and vendor oversight. No system is completely secure, so we cannot guarantee absolute security. More information is available through the Keak Trust Center.
11 Your rights and choices
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal data; object to or restrict processing; withdraw consent; opt out of targeted advertising, sale, or sharing; and appeal a denied request. You may also complain to your local privacy regulator. We will not unlawfully discriminate against you for exercising a privacy right.
Submit a request to support@keak.com. Tell us the right you want to exercise and the account or email involved. We may verify your identity and authority before acting. An authorized agent may submit a request where permitted by law.
If Keak processes the relevant personal data only on behalf of a business customer, we may direct your request to that customer.
12 Children
The Services are intended for business and developer use and are not directed to children under 16. We do not knowingly collect personal data from children under 16. Contact us if you believe a child has provided personal data through the Services.
13 Changes to this Policy
We may update this Policy to reflect changes to the Services, our practices, or applicable law. We will post the revised Policy with a new effective date and provide additional notice of material changes where required by law.
14 Contact us
For privacy questions, requests, complaints, security reports, or information about our privacy representative, contact:
Keak AI, Inc.
651 North Broad Street
Middletown, Delaware 19709
United States
support@keak.com