Privacy Policy

This Privacy Policy explains how Unmetered Machines, Inc. dba Particle AI (“Particle,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information through its website, accounts, APIs, communications, and related services.

This Policy is written for our United States service and includes disclosures relevant to California residents. This Policy is a notice describing our privacy practices and is not part of the Terms of Service or a contract.

When a business customer submits personal information through the API on behalf of its users, Particle generally processes that information for the customer. The customer’s privacy policy, our agreement with that customer, and any applicable data processing addendum govern that processing.

Information you provide

• Account and contact information, such as your name, email address, username, organization, role, and account credentials.
• Billing and transaction information, such as billing contact details, purchased products, usage charges, credit balances, invoices, and payment status. When we accept card or bank payments, our payment processor may collect the payment details directly. Particle generally receives tokenized payment information and transaction status rather than full payment-card details.
• Communications, such as support requests, sales discussions, surveys, feedback, and other messages you send us.
• Information you choose to include in an account profile or otherwise provide through the Services.

Information collected automatically

• Device and network information, such as IP address, browser type, operating system, device type, referring page, and approximate location derived from IP address.
• Website and product activity, such as pages or features viewed, links or actions selected, session timing, referring pages, and events generated through limited analytics tools.
• Service and operational metadata, such as account and organization identifiers, request identifiers, model name, token counts, price and cost, timestamps, latency, status codes, API-key identifier, and related technical events.

Inference content

Inputs and outputs may contain personal information if a customer chooses to include it. For standard synchronous inference, Particle operates under Zero Data Retention (“ZDR”) by default and does not log or write raw prompts or outputs to persistent storage. Content and derived representations may be processed and cached temporarily in memory as reasonably necessary to provide and accelerate the Services. Features that require storage, such as file uploads, batch or asynchronous processing, or retrievable results, are not covered by ZDR unless Particle identifies them as ZDR-eligible. Applicable retention periods will be described in the applicable documentation, account settings, or agreement.

Particle does not use prompt or output content to train, fine-tune, or improve AI models unless the customer separately and affirmatively opts in. Ordinary use of the Services is not an opt-in.

Information from other sources

We may receive business contact information from your organization, a referral source, an event, a publicly available professional source, or a service provider that helps us prevent fraud, process payments, or maintain account records.

• Provide, operate, maintain, and support the website, accounts, APIs, hosted models, and related Services.
• Authenticate users, provision accounts and API keys, process requests, calculate usage, and manage limits.
• Process payments, maintain credit balances, issue invoices, collect amounts due, and prevent payment fraud.
• Communicate about accounts, transactions, security, support, product updates, and services that may interest business contacts, subject to available opt-outs.
• Protect the Services, investigate unauthorized access or fraud, enforce our agreements, and comply with law.
• Measure performance, plan capacity, troubleshoot technical issues, analyze content-free operational information, and improve the Services.
• Evaluate or complete a financing, merger, acquisition, reorganization, or sale of assets or business.

We may aggregate or deidentify information and use it for analytics, security, capacity planning, and service improvement. We will not attempt to reidentify deidentified information except to test whether deidentification works or as law permits.

We may disclose personal information to:

• Service providers that support hosting and content delivery, infrastructure, authentication, payments, analytics, error monitoring, security, communications, customer support, sales operations, and similar business functions.
• Professional advisers, auditors, insurers, financing sources, and transaction counterparties subject to appropriate confidentiality restrictions.
• Government authorities or other parties when required by law or reasonably necessary to protect rights, safety, security, the Services, or the public.
• A buyer, successor, affiliate, or other participant in a merger, financing, acquisition, reorganization, bankruptcy, or transfer of all or part of our business or assets.
• Other parties at your direction or with your consent.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as “sell” and “share” are defined by California law. We have not done either in the preceding 12 months.

Particle may use technologies needed to operate and secure the website, accounts, and Services and limited website and product analytics to understand feature usage, diagnose technical issues, maintain security, and improve functionality. These technologies may include cookies, browser storage, software development kits, pixels, or similar tools and may collect device and browser information, IP address, referral information, timestamps, pages or features viewed, interaction events, and account or organization identifiers. Particle does not intentionally provide prompts, outputs, API keys, passwords, full payment-card information, or other sensitive content to analytics providers. Blocking technologies needed for authentication, security, or preferences may prevent parts of the Services from working. Where applicable law requires consent or another choice for a technology, Particle will provide the required control.

Particle does not currently use advertising pixels, retargeting, or cross-site behavioral advertising and does not knowingly allow third parties to collect personal information about your activities over time across unrelated websites for those purposes.

Because legacy browser “Do Not Track” signals are not standardized, our website may not respond to them. If applicable law requires Particle to honor an opt-out preference signal such as the Global Privacy Control, we will do so. Because we do not currently sell or share personal information for behavioral advertising, such a signal does not change our present practices.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain business and tax records, resolve disputes, enforce agreements, prevent fraud, protect security, and comply with law.

• Account and organization information is generally retained while the account or business relationship is active and for a reasonable period afterward.
• Billing, transaction, invoice, and tax records may be retained for the periods required or reasonably appropriate for accounting, tax, audit, collection, and legal purposes.
• Operational metadata and analytics event data may be retained as needed for billing, analytics, capacity planning, troubleshooting, service improvement, and dispute resolution.
• IP addresses and detailed technical logs are retained for periods reasonably appropriate to their operational, fraud-prevention, and security purposes, and may be kept longer when associated with an investigation or legal obligation.
• For standard inference, raw prompt and output content is not intentionally stored in persistent application storage after request completion, although temporary in-memory processing and caching may occur.

Deletion from active systems may not immediately remove information from backups, legal holds, or records that must be retained. Retained information remains subject to appropriate protections and is deleted or deidentified when the applicable purpose ends.

Particle uses reasonable administrative, technical, and organizational measures designed to protect personal information. These measures may include access controls, encryption in transit, authentication, monitoring, and vendor safeguards appropriate to the nature of the information. No system is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your credentials and API keys and for using appropriate security in your own applications. Contact support@particle.ai promptly if you believe an account or key has been compromised.

• Account information. You may update certain information through your account or by contacting us.
• Marketing communications. You may opt out of promotional email using the unsubscribe link or by contacting us. We may still send transactional, security, and service messages.
• Cookies. You may adjust browser settings to block or delete cookies, subject to the functionality limits described above.
• Privacy requests. Depending on where you live and the law that applies, you may request access, correction, deletion, or a copy of personal information. Send requests to support@particle.ai.

We may need to verify your identity and authority before acting. We may deny or limit a request where law allows, such as when information must be retained for security, fraud prevention, transactions, legal obligations, or the rights of others.

This section supplements the rest of the Policy for California residents. California privacy rights apply only to the extent the relevant law applies to Particle and the information at issue.

The categories below describe personal information Particle has collected or may collect, the business purposes for collection, and categories of recipients. Particle does not necessarily collect every example from every person.

• Identifiers: name, email, IP address, account name, organization ID, API-key identifier. Used for accounts, authentication, service delivery, security, and support. Typically disclosed to hosting, authentication, security, support, and business service providers.
• Customer records: business contact and billing details. Used for contracting, billing, support, and recordkeeping. Typically disclosed to payment, accounting, sales, and support providers.
• Commercial information: services purchased, usage, credits, invoices, and payment status. Used for billing, account administration, analytics, and forecasting. Typically disclosed to payment, accounting, and business operations providers.
• Internet or network activity: browser, device, pages or features viewed, interaction events, referral information, request metadata, timestamps, status, and latency. Used to operate, secure, troubleshoot, and improve the Services. Typically disclosed to hosting, infrastructure, analytics, monitoring, and security providers.
• Approximate geolocation: general location derived from IP address. Used for security, fraud prevention, and regional availability. Typically disclosed to security, hosting, and analytics providers.
• Professional information: employer, organization, and role. Used to provision business accounts, sales, and support. Typically disclosed to CRM, communications, and support providers.
• Account credentials (sensitive): password or authentication information. Used to authenticate and secure accounts. Typically disclosed to authentication and security providers.
• Customer Content: personal information a customer chooses to include in transient prompts or outputs. Used to process the requested inference transaction. Typically disclosed to infrastructure and hosting providers supporting the Services.

California rights

Subject to applicable exceptions and verification, California residents may have the right to know and access personal information, obtain a portable copy, request deletion, correct inaccurate information, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service without unlawful discrimination for exercising a right.

Particle does not sell or share personal information for cross-context behavioral advertising and uses sensitive personal information only for purposes reasonably necessary to provide and secure the Services or as otherwise permitted by law. We therefore do not currently provide separate “Do Not Sell or Share” or “Limit the Use” links.

To submit a request, email support@particle.ai and describe the request. An authorized agent may submit a request where law permits, but we may require proof of authorization and identity. We will not discriminate against you for exercising an applicable privacy right.

Particle does not have actual knowledge that it sells or shares the personal information of consumers under 16.

The Services are intended for businesses and professional developers age 18 or older. Particle does not knowingly collect personal information directly from children. If you believe a child has provided personal information directly to Particle, contact support@particle.ai.

The Services are initially intended for the United States. Personal information may be processed and stored in the United States, where privacy laws may differ from those in other jurisdictions. Do not use the Services from an unsupported location.

The website or Services may link to third-party sites or services. Their privacy practices are governed by their own policies, not this Policy. Particle is not responsible for third-party sites or services you choose to use.

We may update this Policy to reflect changes in our Services, practices, vendors, or law. We will post the updated Policy and revise the last-updated date. If a change materially affects how we use or disclose information already collected, we will use reasonable efforts to provide advance notice when required or appropriate.

For privacy questions or requests, contact support@particle.ai.