Tarseek Legal Center

Privacy Policy

Effective

September 2026

Last updated

September 2026

Version

1.0

This Privacy Policy describes how Tarseek collects, uses, shares, and retains personal data when you use the Service.

Related documents: Data Practices & Retention, Cookie Policy, Privacy Choices & Requests, Data Processing Addendum, and Regional Privacy Addenda.

Controller: Tarseek, Inc.. Privacy contact: hello@tarseek.com.

1. Data we may collect

1.1 Account information

Name, email, account ID, organization, role, and authentication data (for example password hashes or SSO identifiers). Tarseek stores passwords only in hashed form when password login is offered.

1.2 Payment information

Billing name/address, payment-processor customer IDs, transaction IDs, payment status, invoices, and last four digits or card brand where the processor provides them. Tarseek does not store full card number, CVV, or raw sensitive card details.

1.3 API usage metadata

Model, provider, Deployment, timestamp, token counts, request status, cost, latency, error information, request ID, API-key identifier, and routing information.

1.4 API content

Prompts, system messages, images, files, audio, video, and Outputs may be processed to fulfill a request and transmitted to Model Providers. Tarseek does not retain API prompt or output content long-term by default. Temporary copies may exist for delivery, retries, abuse detection, or security, and are access-controlled.

1.5 Chat data

Conversation messages, Model selections, titles, attachments, and conversation metadata may be stored because persistence is an explicit hosted Chat feature. You can request deletion of Conversations as described in Privacy Choices.

1.6 Memory

If Memory is offered, Tarseek may store persistent information you choose to keep across Conversations. Memory, when offered, is controllable, disableable, and deletable separately from Chat history.

1.7 Files

Uploads may be transmitted to Model Providers for processing and stored if you attach them to Chat or other persistent features. Transient processing copies are deleted when no longer needed.

1.8 Technical data

IP address, browser, device, user agent, cookies, security logs, and approximate location derived from IP.

1.9 Customer support

Email, attachments, support tickets, and correspondence.

1.10 Analytics

Product analytics and telemetry to understand feature use and reliability. If no analytics vendor is used, this category is limited to first-party logs.

2. Why we use data

• providing Tarseek and processing AI requests;
• routing and failover;
• billing and Credit accounting;
• preventing fraud, securing systems, and preventing abuse;
• troubleshooting and reliability;
• product analytics;
• customer support;
• legal compliance;
• optional product improvement where a lawful basis and, if required, opt-in exist.

Tarseek does not train its own models on API content unless a user opts into a clearly disclosed program.

3. Legal bases

Where GDPR or similar laws apply, bases include contract (providing the Service), legitimate interests (security, fraud, and product analytics that are not overridden by user rights), consent (certain cookies or optional programs), and legal obligation. Details appear in the Regional Privacy Addenda.

4. Data sharing

Tarseek may share data with:

• Model Providers (Inputs and necessary metadata to fulfill requests);
• cloud infrastructure providers;
• payment processors;
• authentication services;
• analytics vendors if used;
• support tools;
• professional advisers;
• legal authorities where required;
• parties to a corporate transaction, subject to appropriate safeguards.

See the Subprocessor List.

5. International transfers

Tarseek and Model Providers may process data in multiple countries. Where required, Tarseek uses appropriate transfer tools such as Standard Contractual Clauses and UK equivalents.

6. Retention

See Data Practices & Retention. High-level rules:

• account data: for the life of the account and a limited period after deletion;
• billing records: as required by tax and accounting law;
• API content: not long-term by default;
• usage metadata: retained for history, billing, and security;
• Chat: until deleted by the user or account closure, subject to backups;
• security logs: as reasonably necessary.

7. Security

See Security & Trust. Tarseek does not claim SOC 2, ISO 27001, HIPAA, or PCI certification unless those are actually achieved and then stated with a date and scope.

8. Children

The Service is intended for users 18+. Tarseek does not knowingly collect personal data from children. If Tarseek learns it has collected such data, it will delete it except where retention is legally required.

9. Your rights

Depending on law, you may have rights to access, deletion, correction, export, objection, restriction, withdrawal of consent, and complaints to a supervisory authority. Requests: see Privacy Choices & Requests.

10. Automated decisions

Routing, fraud, and abuse systems may use automated processing. Tarseek does not make solely automated legal-effect decisions about natural persons as a consumer credit or employment agency. Customers remain responsible for automated decisions in their own applications.