Privacy Policy.

1. Controller and contact

The controller for the processing described in this policy is:

4rce.com Digital Technologies GmbH
Grafentraubach 910
84082 Laberweinting
Germany
E-mail: info@4rce.com

alluv is a project name of 4rce.com Digital Technologies GmbH. The company’s registration details are available in the Imprint.

2. The public website

The alluv website is delivered as static files through GitHub Pages. It sets no cookies, uses no analytics, advertising or tracking technology, loads no external fonts, scripts or stylesheets, and does not embed third-party content. There is no account area, contact form or newsletter on the website.

When you visit the website, the technical data necessary to deliver it may be processed by the hosting provider, including IP address, browser and device information, requested URL, referrer, time of access and server-log information. We do not receive or evaluate visitor analytics from the static website. The legal basis is our legitimate interest in the reliable and secure delivery of the website under Art. 6(1)(f) GDPR.

3. Service requests and API access

When you use an alluv API or another agreed Service, we process the technical information needed to authenticate, route, secure and operate the request. Depending on the Service, this can include your organisation or contact details, API-key identifier, selected model profile, request path, timestamp, status code, duration, token-usage figures returned by the model service, capacity-limit events and security-relevant information.

Prompt, completion and other request-body content are processed transiently to answer your request. The alluv gateway does not store prompt or completion content and does not use that content to train models. We do not sell Customer Content or use it for advertising.

The legal basis is Art. 6(1)(b) GDPR where processing is necessary to provide a requested or contracted Service, and Art. 6(1)(f) GDPR where processing is necessary for service security, abuse prevention, troubleshooting or operation. If you submit personal data to the Services on behalf of a business customer, that customer is ordinarily the controller for that content.

4. Data minimisation, telemetry and retention

We design operational telemetry to avoid request-body content. The gateway records route, response status and duration for operational status information. Metrics use aggregated counts, durations and capacity information. Technical data is retained only for as long as necessary for security, troubleshooting, contract administration or legal obligations; the applicable retention period may be specified in an Order or a data processing agreement.

Customer Content is not retained by the alluv gateway after a request is answered. You should not rely on the Services as a data-storage or backup service and should retain your own copies of any material you need.

5. Hosting and recipients

The public website is delivered through GitHub Pages (GitHub Inc., USA). GitHub processes the technical data needed to deliver static pages and maintain server logs. More information is available in GitHub’s privacy statement.

For an agreed alluv Service, we may use carefully selected technical service providers and infrastructure operators to host, secure, monitor or maintain the Service. We disclose only the data necessary for the relevant operation and require appropriate safeguards. The applicable Order or a data processing agreement will provide the relevant service-specific detail where required.

If you access a Service through a marketplace, platform or reseller, that third party independently processes data under its own privacy notice. Please review that notice before using the marketplace or platform.

6. International transfers

Where personal data is transferred outside the European Economic Area, we use an appropriate transfer mechanism required by GDPR Chapter V, such as an adequacy decision or the European Commission’s standard contractual clauses, and take supplementary measures where appropriate. The GitHub Pages website delivery described above may involve processing in the United States.

7. Communications

If you contact us by e-mail, we process your name, e-mail address and the content of your request in order to respond and, where applicable, prepare or perform an agreement. The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual communications, or Art. 6(1)(f) GDPR for other legitimate business communications. We retain correspondence only for as long as needed to resolve the inquiry, establish or defend claims, or meet legal retention obligations.

8. Data processing agreements

Where we process personal data on behalf of a business customer and Art. 28 GDPR requires it, we will conclude a separate data processing agreement with that customer before the relevant processing begins. This Privacy Policy does not replace that agreement.

9. Your rights

Subject to the requirements of applicable law, you have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability and objection to processing based on Art. 6(1)(e) or (f) GDPR. Where processing is based on consent, you may withdraw consent at any time with future effect.

You also have the right to lodge a complaint with a supervisory authority. The authority competent for our company is Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

10. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR that produces legal effects concerning you or similarly significantly affects you.

11. Changes to this policy

We may update this policy when the Services, technical arrangements or legal requirements change. The current version is published on this page with its effective date. Material service-specific changes will also be addressed in the applicable Order or data processing agreement where appropriate.

12. Questions about privacy

If you have questions about this Privacy Policy or the processing of your personal data, please contact us at info@4rce.com.