Adzuki AI (“we”, “us”, “our”) operates the API gateway and dashboard at https://adzukiai.com. We act as the data controller for the personal data described in this policy, except where we process data on behalf of a business customer as a processor, in which case that customer’s instructions and privacy notice govern.
Contact for privacy matters: support@adzukiai.com
If you only want the short version:
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
The Service is inherently cross-border. When you submit a request, the content of that request is transmitted to the model provider operating the model you selected, in order to produce a response. Several of our model providers operate infrastructure located in mainland China. Requests routed to those models are processed in mainland China, and the response is returned to you.
This means that if your prompt contains personal data, that data will be transferred to, and processed in, a country that may not have been the subject of an adequacy decision by the European Commission or an equivalent finding in your jurisdiction. Where required, we rely on appropriate safeguards — in particular the European Commission’s Standard Contractual Clauses, together with supplementary technical measures such as transport encryption — and we make a transfer impact assessment available to business customers on request.
You control which model receives your request. If you must keep data within a particular region, contact support@adzukiai.com before sending production traffic and we will tell you which models are hosted where, so you can restrict your model selection accordingly.
Do not submit special-category or regulated data — for example health records, biometric identifiers, financial account numbers or government identifiers — unless you have independently satisfied the requirements applicable to that transfer.
Account, billing and support data are stored on infrastructure located in the United States and the European Union.
Where a legal hold, dispute or investigation applies, we may retain the relevant data for longer, and we will delete or anonymise it once the reason no longer applies.
We share personal data only as needed to run the Service:
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent where processing is based on consent. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.
California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. You have the right to know, delete, correct and to non-discrimination for exercising your rights.
To exercise any right, email support@adzukiai.com. We will verify your identity before acting, and will respond within the period required by applicable law (normally 30 days). You may also delete most account data yourself from the dashboard.
Note that deleting your account does not delete records we must keep for tax or accounting purposes, or data already transmitted to a model provider in the course of a completed request.
The marketing site and dashboard use strictly necessary cookies and browser local storage to keep you signed in, remember your interface preferences (such as light or dark theme and language) and protect against cross-site request forgery. These are required for the Service to function and are not used for advertising.
We use privacy-respecting, aggregated analytics to understand which pages are visited. We do not use third-party advertising cookies or cross-site tracking pixels.
You can clear cookies and local storage in your browser at any time; doing so will sign you out and reset your preferences.
We protect data using transport encryption (TLS) for all traffic, hashed password storage, access controls and network restrictions on administrative interfaces, and we monitor for abnormal activity.
No system is perfectly secure. If a breach affects your personal data and poses a risk to your rights, we will notify you and the relevant authority as required by applicable law.
The Service is not directed at children. You must be at least 18 years old, or the age of legal majority in your jurisdiction, to hold an account. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact support@adzukiai.com and we will delete it.
We may update this policy to reflect changes in our practices or in the law. Material changes will be announced through the dashboard or by email before they take effect. The date of the latest revision is shown at the top of this page.
Privacy questions, data subject requests and complaints: support@adzukiai.com
If you are in the EEA or UK and are not satisfied with our response, you may complain to your local supervisory authority.