Privacy policy

Lore Hex, Inc. (“Lore Hex”, “we”) is a Delaware corporation with its principal place of business in Miami, Florida, United States. We operate an inference API at api.lorehex.co and this website.

For questions about this policy, contact privacy@lorehex.co.

Account information

Name, email address, organization name, and billing contact details you provide when you create an account.

Billing information

Payment card details are collected and stored by our payment processor. Lore Hex does not store full card numbers.

Operational metadata

Per-request timestamps, model ids, token counts, latency, status codes, API key identifiers, and source IP addresses. This is described in detail in the data policy.

Website data

This site serves static pages. It sets no advertising or analytics cookies and embeds no third-party trackers. Our CDN records standard access logs (IP, user agent, path, timestamp) for security and reliability.

Support correspondence

Anything you send us in a support ticket or email, including any reproduction cases you choose to share.

We do not collect or retain the content of your prompts or the completions we return. We do not build behavioral profiles, we do not buy personal data from brokers, and we do not use your data for advertising.

• To provide the API and authenticate requests
• To meter usage and bill accurately
• To detect, investigate, and stop abuse and fraud
• To provide support you have asked for
• To send service notices — incidents, breaking changes, billing events
• To meet legal, tax, and accounting obligations

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Where the GDPR or UK GDPR applies, we process personal data on the basis of contractual necessity (providing the service you signed up for), legitimate interests (security, abuse prevention, and service improvement that does not involve inference content), and legal obligation (tax and accounting records).

We share personal information only with service providers acting on our behalf, under contract, and only as needed: cloud and GPU infrastructure providers, our payment processor, and our email and support tooling. We disclose information in response to valid legal process, and in connection with a merger or acquisition, in which case we will give notice before your information becomes subject to a different policy.

Account records are retained for the life of the account and for seven years afterward where tax and accounting law requires it. Operational metadata is retained for 90 days. Inference content is never retained. Support correspondence is retained for three years.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to processing or withdraw consent. California residents have the rights described in the CCPA/CPRA, including the right to know, delete, correct, and to opt out of sale or sharing — noting that we do not sell or share personal information as those terms are defined.

To exercise any of these rights, write to privacy@lorehex.co. We respond within 30 days and will not discriminate against you for making a request.

Lore Hex is based in the United States and processes data there. Where we transfer personal data out of the EEA or UK, we rely on Standard Contractual Clauses.

Traffic is encrypted in transit with TLS 1.2 or better. API keys are stored hashed. Access to production systems is restricted to personnel who need it and is logged. Report vulnerabilities to security@lorehex.co.

The service is not directed to children under 13 and we do not knowingly collect their personal information.

We will post any change here and update the effective date. For material changes that reduce your protections, we will give at least 30 days’ notice by email to account holders before the change takes effect.