Privacy Notice

1. Scope and data controller

This notice applies when you visit eltexlabs.com, create or use an ELTEX account, call an ELTEX API, connect an application, purchase a plan or credit product, generate media, contact support, or otherwise use a service that links to this notice. ELTEX Labs, through the contracting operator identified on your checkout or invoice, is the controller for account and service data it determines how to process.

When a customer submits personal data through an API for its own business purposes, that customer may be the controller and ELTEX may act as a processor or service provider. Additional data-processing terms may be required for regulated or enterprise use.

2. Data we collect and its sources

Data you provide. This can include name, email, account credentials, organization details, support messages, model requests, referral information, billing contact data, Inputs submitted to AI or media features, OAuth application details, and settings.

Account and transaction data. This can include plan, subscription status, purchases, payment confirmation, invoice identifiers, credit balances, Reset Tickets, Burst Packs, Elixir activity, referral rewards, refunds, and chargebacks. Payment processors collect payment-card or bank details under their own notices; ELTEX generally receives transaction status and identifiers rather than full card details.

Technical and usage data. This can include IP address, approximate country or region, time zone, device and browser information, timestamps, API-key identifiers, OAuth grants, requested and routed model, task classification, token counts, latency, request identifiers, capacity consumed, errors, security events, and pages or features used.

Data from third parties. Authentication providers, payment processors, model and infrastructure providers, connected applications, referral partners, and fraud-prevention services may provide identity, transaction, usage, or security data.

3. How AI Inputs and outputs are handled

ELTEX is an AI-routing intermediary. To fulfill a request, ELTEX sends your Input to a model or infrastructure provider selected by you or by ELTEX routing. When preclassification is enabled, a limited excerpt of a request may first be sent to a classification provider to select a route. The selected provider receives the request data needed to generate the output.

For standard chat-completion usage, ELTEX currently records operational metadata such as the requested and routed model, classification, token counts, cost, capacity source, timestamps, and provider request identifier. ELTEX does not intentionally place chat prompt or response text in its usage-log record. Data may still be processed transiently in ELTEX systems and may be retained by upstream providers under their applicable terms, security controls, abuse-prevention requirements, or law.

For image and video generation, ELTEX may retain generation prompts, input asset references, settings, provider job identifiers, status, error details, output URLs, and related transaction records for generation, delivery, support, abuse prevention, and accounting. Generated assets may be hosted by a third-party provider and remain accessible according to that provider's retention controls.

Provider practices vary by model and endpoint, including whether data is retained or used to improve a provider's service. ELTEX does not promise Zero Data Retention unless a specific route or written agreement expressly says so. Do not submit data that a selected provider is not permitted to process.

4. Why we process data and legal bases

ELTEX processes data to provide accounts, authentication, routing, model responses, media generation, billing, capacity, referrals, support, documentation, and connected applications; secure the service; detect fraud and abuse; enforce policies; maintain reliability; measure costs and usage; debug failures; communicate service and legal notices; comply with law; and improve products using aggregated or de-identified operational information.

Depending on the context and applicable law, processing is based on performance of a contract, steps requested before a contract, legitimate interests in operating and securing the service, compliance with legal obligations, protection of rights and safety, or consent. Where consent is the basis, you may withdraw it prospectively.

5. When data is disclosed

ELTEX may disclose data to model and infrastructure providers needed to process a request; authentication, hosting, database, storage, communications, support, security, analytics, and payment vendors; connected applications you authorize; administrators of an organization account; professional advisers; authorities or other parties when required by law or reasonably necessary to protect rights and safety; and parties involved in a financing, merger, acquisition, reorganization, insolvency, or sale of assets.

ELTEX does not currently sell personal data for money or use personal data for cross-context behavioral advertising. If those practices change, ELTEX will update this notice and provide legally required choices before the change applies.

6. Cookies and browser storage

ELTEX uses strictly necessary browser storage for authentication, security, and consent records. Optional functional storage can remember calculator inputs or preferences if you allow it. ELTEX does not currently deploy advertising cookies or third-party analytics cookies on the public site. Details and controls are available in the Cookie and Storage Policy and through the “Cookie settings” link in the footer.

7. Retention

ELTEX retains data only for as long as reasonably necessary for the purposes above. Retention depends on the data type, account status, provider behavior, security and fraud risk, support needs, payment and tax obligations, contractual commitments, limitation periods, and legal requirements. Account and transaction records may be retained after account closure where needed for accounting, disputes, fraud prevention, or law.

Deletion from active systems may not immediately remove encrypted backups, immutable security records, transaction evidence, or data independently retained by model, payment, authentication, or infrastructure providers. ELTEX will isolate or delete such data according to its normal backup cycle and legal obligations.

8. Security

ELTEX uses administrative, technical, and organizational measures intended to protect data, including access controls, credential hashing or tokenization where appropriate, scoped API permissions, provider webhook verification, logging, and transport encryption. No online system is completely secure. You are responsible for protecting credentials, limiting permissions, and promptly reporting suspected compromise.

9. International processing

ELTEX and its providers may process data in countries other than your own. Privacy laws and government-access rules may differ. Where required, ELTEX relies on contractual safeguards, adequacy mechanisms, consent, or another lawful transfer basis. Routing a request to a particular provider may cause processing in locations used by that provider.

10. Your choices and privacy rights

Depending on your location, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of certain sale, sharing, targeted advertising, or profiling; and appeal a denied request. You may manage cookies through ELTEX controls, disconnect OAuth applications, delete API keys, cancel subscriptions, or close your account.

Send a request to contact@eltexlabs.com. ELTEX may verify your identity, authority, and jurisdiction. Some requests may be limited where data is needed for security, fraud prevention, transactions, legal claims, other people's rights, or compliance. Authorized agents may submit requests where applicable law permits and valid authority is provided.

11. Regional privacy notices

EEA, United Kingdom, and similar jurisdictions. You may have GDPR-style rights and may complain to your local supervisory authority. ELTEX's legal bases are described in Section 4.

United States state laws. Residents of certain states may have rights to know, delete, correct, obtain a copy, or opt out of sale, sharing, targeted advertising, or qualifying profiling. ELTEX does not discriminate for exercising applicable rights. Because ELTEX does not currently conduct those opt-out activities, a Global Privacy Control signal does not change advertising behavior, but ELTEX will treat a valid signal as a request where legally required.

Indonesia and other Asia-Pacific jurisdictions. Applicable local law may provide rights to access, correct, delete, withdraw consent, or object. ELTEX will respond according to the law that applies to the relevant processing and contracting operator.

12. Children

The services are not directed to children and are limited to users aged 18 or older. ELTEX does not knowingly collect personal data from children through account services. If you believe a child has provided data, contact ELTEX so the matter can be investigated.

13. Changes to this notice

ELTEX may update this notice for legal, provider, security, product, or operational changes. The new effective date will be posted here. Material changes will be communicated through the service or account email where reasonably required.

14. Contact

Privacy requests and questions may be sent to contact@eltexlabs.com. The legal name and address of the contracting operator should also appear on your checkout receipt or invoice.