Privacy and your data

Your endpoints are private. The model runs for you alone, and what you send it stays between your app and the model.

This page is a plain summary. The full Privacy Policy is the one that counts if the two ever differ.

What we never keep

• Prompts and outputs. The text, images or documents you send and the answers you get are passed through and never written to our logs or databases.
• Your API keys. We store only a fingerprint of each key and its first few characters, so a key can be checked and recognised but never read back.
• Remote control conversations. Sessions between bitsrun and your phone or browser are end-to-end encrypted. Our relay passes them along without being able to read them. We see only who connected, when, and how much data passed.

We never use your data or your models to train anything. We do not sell your data, and we do not use it for advertising.

What we keep, and why

The scrambled IP address can be matched against an address you give us, but cannot be read back.

Stored models at a negative balance. Storage is charged from your credit, so if your balance goes below $0 we email you on the first day with the date your stored models will be deleted, and remind you 2 days before it. If the balance is still below $0 after 7 days, we delete your stored models and the endpoints that use them, and email you to confirm. Adding credit that brings the balance back to $0 or more cancels this. See Model storage.

Where your data lives

Your account data, stored models and GPUs are in the United States. Payments are handled by Stripe; BitsRun never sees your card number.

Who we share data with

Only the companies we need to run BitsRun, and only what each one needs:

• Amazon Web Services hosts BitsRun: the servers, storage, sign-in and email.
• Stripe, through its Link service, takes your payments and is the seller on your receipt. It handles your card and payment details under its own privacy policy.
• Apple and Google deliver push notifications to the iOS and Android apps. A notification holds a short message, such as an endpoint or computer name or your balance, and never a prompt or an answer.
• Hugging Face and the Ollama registry are contacted when you ask us to fetch a model from them. Your Hugging Face token goes only to Hugging Face.

We do not sell your data and we do not share it for advertising.

How your models are kept separate

• Models you upload or copy are stored in your account and used only for your endpoints.
• BitsRun runs only model weights, in the safetensors and GGUF formats. It never runs code that comes with a model (such as trust_remote_code), so a model file cannot run programs.
• Each model runs separately from other customers' models.

Your Hugging Face token

When you add a Hugging Face token for gated or private repos, we check it with Hugging Face, store it encrypted, and use it only to read and copy the repos you deploy. It is never shown again, even to you. Use a read-only token, and remove it any time:

bitsrun hf-token rm

Your choices

• Delete what you do not need: endpoints, keys and uploads, from the dashboard or the command line.
• Revoke access: keys, command line sessions and remote control devices. See Sessions and devices.
• Delete your account: see Delete your account.
• Ask for a copy, a correction or deletion: you can delete your account yourself, or write to privacy@bitsrun.com or support@bitsrun.com from the email you sign in with. We answer within 30 days.