Privacy Policy

Effective 29 October 2026 · Excession Labs

What we collect

• Account: your email address, the answers you give during access review (use case, organization, domain), and review decisions.
• Payment: Stripe processes card details. We receive the card brand, last four digits, funding type and country, never the full number.
• Usage: for each request, the time, endpoint, token counts, cost and status. We do not store prompts or outputs.
• Security records: IP address and time for policy acceptance, logins and approvals, kept as an audit trail.
• Website analytics: page views, clicks and session replays through PostHog, with typed values masked; and the X (Twitter) ads pixel to measure ad campaigns.

Model providers

Requests are processed by our model infrastructure partners to generate responses. They do not receive your account details. We do not use your prompts or outputs to train models.

How long we keep it

Account, payment and audit records: for as long as your account is open, then as long as the law requires. Usage metadata: up to 24 months.

Your rights

Email privacy@excessionlabs.ai to access, correct, export or delete your data.