Privacy Policy

1. Who we are

PoolMill is operated by Solid Zero LLC. Contact: [email protected]. This policy covers the public site (https://poolmill.com) and the customer console.

2. What we collect

• Account data: your email address and a salted password hash. We never store plaintext passwords and can never read yours.
• Billing data: package purchases, invoices, and payment status. Card numbers are processed by Stripe and never touch our servers — we store only Stripe session/payment identifiers.
• API usage data: per-request model id, token counts (prompt, completion, cache-read), billed cost, timestamp, and request id. This is what your quota, invoices, and the usage page are computed from.
• Operational logs: web server access logs (IP, user agent, path) for abuse prevention, retained at most 90 days.

3. What we never collect

• Prompt and completion content is never stored. Your usage ledger records that a request happened and what it cost — not what it said.
• We do not sell personal data, run third-party ad trackers, or share customer lists.

4. How we use it

Account data authenticates you. Billing data fulfils your purchases and keeps our books. Usage data meters quota and enforces limits. Logs keep the service abuse-free. Nothing else.

5. Sharing

We share the minimum with the processors required to run the service: Stripe (payments), Cloudflare (CDN/security), and our upstream model providers (inference — they receive your prompts at request time, under their own terms). No other disclosure except where required by law.

6. Retention

Account and billing records are kept while your account is active and for 7 years after (tax/accounting). Usage rows for an exhausted period are kept for the same window. Access logs rotate after 90 days.

7. Your rights

Write to [email protected] to request a copy, correction, or deletion of your personal data. Deletion closes the account; invoices already issued are retained as accounting records but dissociated where the law allows.

8. Cookies

One strictly-necessary session cookie keeps you signed in. No analytics or advertising cookies.