Skip to content

Privacy Policy

Last updated August 2026

Draft. This policy describes how the service is actually built, but the legal entity name, registered address, ICO registration and data-controller details still need to be supplied before launch. Have a solicitor review it.

What we collect

  • Account data — your email address, and your name and avatar if you sign in with a third-party provider.
  • Usage records — for each run: the model used, token counts, duration, and the amount charged.
  • Billing data — handled by Stripe. We store a customer reference and a ledger of credits and debits. We never see or store your card details.
  • Technical data — IP address and user agent, used for rate limiting and abuse prevention.

Prompts and completions

We do not retain the content of your prompts or the models’ responses. We store a salted cryptographic hash of each prompt purely to detect abusive repetition. The hash cannot be reversed to recover your text.

Your prompts are never used to train models — ours or anyone else’s. When a request is routed to an upstream model provider, that provider’s own terms apply to the request in transit; we select providers that do not train on API traffic.

Why we hold it

To operate the service and bill you accurately (contractual necessity), to prevent fraud and abuse (legitimate interests), and to meet accounting obligations (legal obligation).

How long we keep it

Account and usage records are kept while your account is open and for six years afterwards, which is the retention period our accounting obligations require. Prompt hashes are deleted after 90 days.

Who we share it with

Stripe (payment processing), and the model provider serving each request. We do not sell data and we do not share it for advertising.

Your rights

Under UK GDPR you may request access to your data, correction, erasure, restriction of processing, or portability, and you may object to processing based on legitimate interests. Email hello@progressivelabs.uk and we will respond within one month. You may also complain to the Information Commissioner’s Office.

Cookies

We set a session cookie to keep you signed in. That is the only cookie we set. There is no advertising or third-party analytics tracking on this site.