Your account and data.

Who is responsible

Archbotics Oy, business ID 3091656-2, is the controller for Some AI Stuff account and service data. Contact erno@archbotics.com about privacy or your rights.

What we process and why

For accounts, we process your name, email address, verification status and sign-in identifiers. Google sign-in can provide a profile image and provider tokens. Email accounts use a password hash. Session records can include IP addresses, browser information and expiry dates. Verification and recovery use temporary tokens and transactional emails.

API-key records include a stored hash, key name, identifying prefix, expiry and usage metadata. We use account usage counters and IP-based rate protection to authorize requests, enforce allowances and prevent abuse. Search and filter text appears in page requests. Service logs can include request paths, status and operational details.

For Pro, we retain Stripe customer, checkout, subscription and invoice identifiers, payment status, billing periods and cancellation or withdrawal records. Stripe hosts payment entry and billing management. Some AI Stuff does not store your card number or security code.

We process account, access and billing information to provide the contract you request. Required financial records are processed to meet legal obligations. Proportionate security and abuse prevention serve our legitimate interests in protecting the service and its users. Required account or payment information is necessary to provide the relevant feature; the public website remains available without an account.

Usage analytics

We use Cloudflare Analytics Engine to understand which parts of the service are used and identify errors. These records contain page or endpoint categories, request methods, response status, response time, cache status and, when Cloudflare supplies it, a verified-bot classification. MCP tool records contain the tool name and whether it succeeded. Model pages are grouped together; we do not store the model ID in these analytics.

Usage analytics do not store IP addresses, account or user identifiers, email addresses, API keys, cookies, browser identifiers, search text, request bodies or full URLs. They add no browser tracker or analytics cookie. Counts include repeated requests and automated clients; they do not identify individual visitors. Cloudflare retains these analytics for three months.

Service providers and international processing

Cloudflare hosts the website, Worker and database and delivers transactional email. Google processes sign-in when you choose Google. Stripe processes subscription payments and its hosted billing portal. These providers receive the information needed for their respective services and also describe their own processing in their privacy notices.

Provider processing can take place outside the European Economic Area. Applicable provider agreements describe international-transfer safeguards, including adequacy decisions or standard contractual clauses where relevant. Contact us for information about the arrangements that apply to your data.

Cloudflare privacy notice · Google privacy policy · Stripe privacy policy

Cookies and browser storage

Account sign-in uses first-party session and security cookies. Sessions normally expire after 30 days and can renew while you use the account. Appearance settings and saved model IDs use this browser’s storage. You can clear saved models on the watchlist page or remove the site’s browser data. External source links take you to the named provider or publisher.

Retention and deletion

Account and key records are retained while needed to provide your account, manage access and address security issues. Billing, withdrawal and dispute records may be retained after cancellation where required for accounting, tax obligations or legal claims. Expiry of a session, key or recovery link ends its validity; it does not necessarily mean every associated record or backup is immediately deleted.

Monthly usage windows and short-term rate records are cleaned up after expiry through bounded maintenance. Contact us to close your account or request deletion. We assess what can be deleted and explain any records that must be retained, their purpose and the applicable retention criteria.

Your rights

You can request access, correction, erasure, restriction and, where applicable, portability of your personal data. You can object to processing based on legitimate interests. We may ask for information needed to verify your identity and normally respond within one month. You can also complain to the Finnish Data Protection Ombudsman or your local data-protection authority.

Privacy requests do not automatically cancel a paid subscription. Use your account to manage renewal or withdrawal, or contact us if you need help with both. See the Terms for billing and consumer rights.