Privacy Policy

Last updated: 28 July 2026

This policy explains how InfiniteBridge Tech Ltd (“InfiniteBridge”, “we”, “us”) handles personal data when you use our websites, API gateway, account console, support and payment services.

1. Controller and contact

InfiniteBridge Tech Ltd, 128 City Road, London, EC1V 2NX, United Kingdom, is the controller for account, website, billing and support data. Contact support@infinitebridgetech.com.

2. Data we collect

• Account details, email verification status and security events.
• Billing records, top-ups, balance movements, refunds and disputes. Full card details are handled by our payment processor and are not stored by us.
• API metering metadata: key identifier, model, usage, time, response status, latency, IP address and request ID.
• Support messages and limited technical data needed for security, rate limiting and fraud prevention.

3. Prompts and model output

Requests are transmitted to the upstream provider needed to perform the model inference you select. Provider terms and processing regions vary by route. Do not submit regulated, highly sensitive, secret or confidential information unless you have confirmed the route meets your requirements. We do not use customer prompts to train our own models. We may temporarily process request content where technically necessary for delivery, security investigation, abuse prevention or support requested by you.

4. Purposes and legal bases

We process data to provide and secure the service, meter usage, manage balances, handle payments and refunds, respond to support, prevent abuse, comply with law and improve reliability. Legal bases include performance of a contract, legitimate interests, legal obligations and consent where required.

5. Providers and international transfers

We use infrastructure, email, security, payment and AI model providers, including providers outside the UK. Where required we use adequacy regulations or contractual safeguards. Model requests may be processed in the route’s stated region or another region used by the upstream provider.

6. Retention and security

We retain account and transaction records while needed for service, tax, accounting, fraud, dispute and legal purposes. Logs are kept only as reasonably necessary. We use encrypted transport, credential hashing, access controls, anti-bot controls, monitoring and backups, but no online system is absolutely secure.

7. Your rights

Where applicable, you may request access, correction, deletion, restriction, portability or objection, and may complain to the UK Information Commissioner’s Office. We may verify identity and retain records where legally required.

8. Cookies and changes

We use essential session storage and security technologies for login, language preference, fraud prevention and Cloudflare Turnstile. We do not sell personal data. Material policy updates will be posted here with a revised date.