Last updated: August 3, 2026
This notice explains how Nullstack handles data for its regional open-source model inference service.
NullStack operates Nullstack and is responsible for the processing described in this notice. For privacy questions or requests, email privacy@nullstack.in.
We process prompts, completions, web-search queries, account identifiers, email addresses, IP addresses, API-key metadata, selected inference regions, token and cost totals, billing records, security and reliability logs, referral or attribution sources, and website or product events.
We use this data to provide inference and tools, authenticate and secure the service, administer accounts, calculate usage, collect payment, prevent abuse, diagnose failures, and comply with legal obligations. We process service, account, and billing data as necessary to perform our contract with you; limited security, fraud-prevention, reliability, and operational data for our legitimate interests in operating and protecting Nullstack; and records we are required to keep to satisfy accounting, tax, or other legal obligations.
Every inference request is authenticated and routed by our LiteLLM gateway in the European Union. Your API key determines whether model inference may run in Europe, the United States, or either region. Inference itself runs on GPU capacity we operate and, when our own capacity is unavailable or at its limit, on third-party infrastructure providers acting on our instructions; a provider receives only the request content needed to generate a completion and returns it to our gateway. The region on your key binds all of this equally. If United States is enabled, prompt content may be transferred to US infrastructure and the completion returns through the EU gateway. If no permitted deployment is available from any source, the request fails rather than running outside your allowed regions. Region selection applies to model inference only; it does not determine where account, billing, authentication, analytics, web-search, or other service-provider processing occurs.
Beyond the inference regions you select, some service providers may process personal data outside your country. Where data-protection law requires a transfer mechanism, we rely on an applicable adequacy decision, contractual safeguards such as Standard Contractual Clauses, or another lawful mechanism.
We do not retain prompt text, completion text, or request bodies. Content exists only for as long as it takes to process the request and return your response. This is not a configurable default: content logging is disabled at the gateway itself, and Nullstack offers no setting, plan, or feature that turns request retention on. Infrastructure providers process request content transiently to execute the request; any operational logging on their own systems is governed by their terms. If we ever introduce a feature that stores request content, such as history, debugging, or exports, it will be off unless you turn it on, and we will update this notice before it becomes available.
We do not use customer prompts, completions, request bodies, histories, or logs for model training, fine-tuning, evaluation datasets, or product analytics unless you separately and explicitly agree. We do not authorize any provider to use your request content to train or improve models.
Google Analytics and browser-side PostHog EU process website and product events, device or browser information, IP address, and page paths. When you are signed in, we also send your Nullstack account identifier and the email address on your account to PostHog, together with the referral source that first and last brought you to the site. We do not send prompt or completion bodies to these analytics services. PostHog product analytics is hosted in its EU cloud, and browser events reach it through a first-party path on our own domain. We disable PostHog session recording and autocapture, so we do not record your screen, keystrokes, or form contents. Google Analytics and PostHog set cookies or similar browser storage for these purposes; authentication cookies set by Clerk are strictly necessary to keep you signed in. We also send minimized server-side operational events to PostHog EU to measure account and service workflows.
We use Clerk for authentication, Dodo Payments for billing, PostHog EU and Google Analytics for analytics, Brave Search for optional web search, and hosting, networking, and GPU infrastructure providers for the gateway, database, and model inference. They receive only the data needed for their role and process it under their own locations, contractual terms, and legal obligations. We select inference infrastructure providers that maintain independent, externally audited security certifications, such as SOC 2 Type II and ISO/IEC 27001, and that make GDPR-aligned data-processing terms available; a certification held by a provider describes that provider's own control environment and is not a certification of Nullstack.
When an agent invokes Nullstack web search, Nullstack sends the search query and the parameters needed to perform that search to the Brave Search API. We do not send the full conversation to Brave Search. Brave may process the query and related request metadata to return search results.
We retain account identifiers, API-key metadata, billing status, token totals, and usage-event records while your account is active and afterward only as needed for security, dispute resolution, accounting, tax, or other legal requirements. Analytics events are retained according to our configured provider retention periods. We delete or anonymize data when it is no longer needed for these purposes.
Depending on applicable law, you may request access, correction, deletion, restriction, or portability of personal data, or object to certain processing. Where we rely on your consent, you may withdraw it at any time without affecting processing already carried out. You can block or delete analytics cookies through your browser settings, and Google offers a Google Analytics opt-out browser add-on. You may also complain to your local data-protection authority. To exercise a privacy right, email privacy@nullstack.in.
We update this notice when our processing changes, including when we add or change the categories of providers that serve inference or the features that handle your content. The date at the top of this page reflects the most recent change. Where a change materially affects how we handle your content, we will make that clear before it takes effect.