LLMWATCH

Privacy Policy

Last updated: 30 January 2026

1. Introduction

LLMWatch ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at llmwatch.ai and our application at app.llmwatch.ai (collectively, the "Services").

We process personal data in accordance with the General Data Protection Regulation (GDPR) (EU 2016/679) and applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is LLMWatch. For any privacy-related inquiries, please contact us at privacy@llmwatch.ai.

3. Personal Data We Collect

We may collect the following categories of personal data:

  • Account data: email address, name, password (hashed)
  • Usage data: IP address, browser type, device information, pages visited, timestamps
  • Workspace data: brand names, descriptions, keywords, website URLs, and other information you provide when using the Services
  • Billing data: payment information processed by our payment provider (we do not store full card details)

4. Legal Basis for Processing (GDPR Art. 6)

  • Contract performance: Processing necessary to provide the Services you have requested
  • Legitimate interests: Improving our Services, security, fraud prevention, analytics
  • Consent: Where you have given explicit consent (e.g. marketing communications, non-essential cookies)
  • Legal obligation: Where we are required to retain or disclose data by law

5. How We Use Your Data

We use your personal data to:

  • Provide, maintain, and improve the Services
  • Authenticate users and manage accounts
  • Process payments and manage subscriptions
  • Send service-related communications (e.g. password reset, execution notifications)
  • Respond to support requests
  • Comply with legal obligations
  • Protect against fraud and abuse

6. Data Sharing and Recipients

We may share your data with:

  • Service providers: Hosting (Vercel, Railway), database (Supabase), payment processing (Stripe), email delivery
  • Legal authorities: When required by law or to protect our rights

We do not sell your personal data. Our service providers are bound by data processing agreements and process data only on our instructions.

7. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, where required.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Account data is retained until you delete your account or request erasure. We may retain certain data for longer where required for legal, regulatory, or legitimate business purposes.

9. Your Rights Under GDPR

You have the following rights:

  • Right of access (Art. 15): Obtain confirmation of whether we process your data and a copy of it
  • Right to rectification (Art. 16): Correct inaccurate or incomplete data
  • Right to erasure (Art. 17): Request deletion of your data in certain circumstances
  • Right to restrict processing (Art. 18): Limit how we use your data
  • Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
  • Right to object (Art. 21): Object to processing based on legitimate interests
  • Right to withdraw consent: Where processing is based on consent
  • Right to lodge a complaint: With a supervisory authority in your country of residence

To exercise these rights, contact us at privacy@llmwatch.ai. We will respond within one month.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption in transit (TLS), secure authentication, and access controls.

11. Children

Our Services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us.

12. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Services after changes constitutes acceptance.

13. Contact

For privacy-related inquiries: privacy@llmwatch.ai

For data protection officer (if applicable): dpo@llmwatch.ai

← Back to home