Privacy

nocapllm is pre-launch. Today this is a marketing site with an early-access email form — there is no product account, no billing, and no inference service running. This policy covers what we collect now, and flags what changes when the service opens.

What we collect

Your email address

Only if you enter it in the early-access form. We use double opt-in: you are not on the list until you confirm. Every email carries an unsubscribe link, and unsubscribing is permanent unless you sign up again.

How you found us

If you arrive with a referral or campaign tag in the URL, we record it in a first-party cookie for up to 90 days and associate it with your signup. This tells us which channels work. It contains no personal information, and we do not use it for advertising or share it with anyone.

Usage analytics

We measure page views and which parts of the site people read. Analytics runs without cookies and is served from our own domain. We honour the Global Privacy Control signal: if your browser sends it, analytics is switched off for you automatically. We do not run advertising trackers, and we do not sell or share personal information.

What we never collect

• Prompts and completions. When the API launches, your prompts and the model's output will not be used for analytics or marketing, will not be retained as part of our operational logging, and will not be used to train any model — ours or anyone else's.
• Payment details. Card data will be handled by our payment processor and will never reach our systems.
• Passwords. Sign-in will be handled by a dedicated identity provider.
• Anything from children. This site is not directed at anyone under 16.

How long we keep it

• Email address: until you unsubscribe or ask us to delete it. If we have not launched and you have not opened an email in two years, we delete it anyway.
• Attribution cookie: up to 90 days in your browser.
• Analytics data: kept no longer than we need it to understand how the site is used, and deleted on request.

Security

We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and restricting access to staff who need it. No system is perfectly secure, but if a breach affects your data we will notify you and the relevant regulator as required by law.

Where your data goes

Our providers are located in the United States, so data you give us is processed there. Where we transfer personal data out of the UK or EEA, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

Your rights

Wherever you live, you can ask us to tell you what we hold about you, correct it, delete it, or provide a copy. Email support@nocapllm.com and we will respond within 30 days. We will not treat you differently for asking.

If you are in California, that includes the CCPA/CPRA rights to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of — but we honour Global Privacy Control regardless. If you are in the UK or EEA, our lawful bases are your consent for marketing email and our legitimate interest in understanding how the site is used; you may withdraw consent at any time and you have the right to complain to your local supervisory authority.

Who processes your data

We use the following service providers, who process data on our behalf and under contract:

Joining this list when the service launches: Auth0 (Sign-in), Stripe (Payments), Better Stack (Uptime monitoring). We will update this page before any of them processes your data.

We may also disclose personal data where we are legally required to, or to protect our rights, and to a successor entity if the business is acquired — in which case this policy continues to apply until you are told otherwise.

Changes

We will update this page as the product ships, and we will change the date at the top when we do. If a change materially affects data we already hold about you, we will email you before it takes effect.