Polymodel

Privacy Policy

Last updated: May 6, 2026

This Privacy Policy describes how Polymodel (“Polymodel”, “we”, “our”) collects, uses, and shares information when you use our service.

1. Information We Collect

We collect the following categories of information:

  • Account information: email address, password (hashed), display name, and optional profile data you provide.
  • Conversation content: the messages you send to AI models and the responses you receive. Stored in your account so you can return to past conversations.
  • Usage data: token consumption, model usage, timestamps, IP address, and browser metadata for security and billing.
  • Payment information: processed by Stripe. We store only a Stripe customer ID and the last 4 digits of your card (if available) — never your full card number.

2. How We Use Your Information

  • To provide, operate, and improve the Service.
  • To process payments and manage subscriptions.
  • To enforce our Terms of Service and prevent abuse.
  • To send transactional emails (password reset, billing receipts, security alerts).

3. Sharing With AI Providers

When you select a model and send a message, your input is forwarded to the chosen provider's API to generate a response. Each provider has its own privacy policy that governs how they handle your data:

4. We Do Not Train Models on Your Data

Polymodel does not use your conversations to train any AI model. We use the API tier of each provider, where inputs are not, by default, used for the provider's training (subject to each provider's own terms).

5. Other Third-Party Services

To operate the Service, we share limited data with these processors:

  • Supabase — database & authentication hosting
  • Stripe — payment processing
  • Resend — transactional email delivery
  • Cloudflare — CDN, DDoS protection, bot challenge (Turnstile)
  • Upstash — rate limiting (Redis)

6. Data Retention

Conversation history is retained until you delete it or your account. Usage records are retained for 24 months for billing and compliance. Account deletion permanently removes your messages and anonymises your usage records.

7. Cookies

We use only essential cookies (session token, CSRF, theme preference). We do not use third-party advertising cookies or cross-site trackers.

8. Your Rights

You may, at any time:

  • Access or export your conversation history
  • Correct your account information
  • Delete individual conversations or your entire account
  • Opt out of non-essential email by contacting us

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Policy. Material changes will be communicated via email or in-app notice at least 14 days before taking effect.

11. Contact

Questions or requests? Email support@polymodel.io.