LEGAL
Privacy Policy
Last updated: October 1, 2026
OpenInstinct is an independent project based in Turkey. It is not yet an incorporated company. This policy covers the website at openinstinct.dev, the console, and the OpenInstinct API. Questions about it go to info@openinstinct.dev.
Content you send to the API
Requests to the API and the console playground contain the text, images, and questions you want a decision on. We process that content in memory to produce the response and then discard it.
- We do not store the text, images, questions, or results of your requests.
- We do not use them to train or evaluate models.
- We do not share them with anyone, other than the infrastructure providers that run the request.
What we do keep
Account data. Your name, email address, and sign-in details. If you sign in with Google, we receive your name, email address, and profile picture from Google.
Usage records. For each request we record a request ID, the workspace and API key it belongs to, the endpoint and model, the response status, token counts, cost, timing, and the time of the request. These records contain no request content. We use them for billing, rate limits, and the usage pages in the console.
Website analytics. The website and console use a self-hosted analytics tool that counts page views and records general information such as referrer, browser, and country. We do not use advertising trackers.
Email. If you write to us, we keep the conversation so that we can answer.
How we use it
We use this data to run the service: to sign you in, to count usage against your balance, to prevent abuse, to send service emails about your account, and to understand how the product is used. We do not sell personal data.
Who else handles it
We rely on infrastructure providers to operate the service, including Cloudflare for hosting and networking, Modal for GPU inference, and Google if you choose Google sign-in. They process data on our behalf, only as needed to provide their service. Inference runs in the EU.
How long we keep it
Account data and usage records are kept while your account exists. When you ask us to delete your account, we delete your account data and the usage records tied to it, unless we are required by law to keep something longer.
Your choices
You can ask for a copy of your data, a correction, or deletion of your account by writing to info@openinstinct.dev. API keys can be revoked in the console at any time.
Changes
If this policy changes, we will update this page and the date above. For changes that affect how request content is handled, we will also notify account holders by email before the change takes effect.