Privacy
This page describes the Luspend product as shipped. It is not a substitute for a signed DPA.
What we store
Account data (email, organization, membership), proxy token metadata, request usage (tokens, cost, latency, team and feature tags), and billing state needed to run the subscription.
What we do not store
Prompt text, completion text, and provider API keys are not written to Luspend storage. Keys remain in your application and are forwarded to OpenAI or Anthropic with the request.
Where processing happens
The dashboard is hosted on Vercel in Frankfurt (fra1). The proxy is intended to run in the EU. Model inference still happens at OpenAI or Anthropic in the region those providers use for your request.
Processors
Typical processors include Vercel (dashboard), Railway (proxy, Postgres, Redis), Stripe (billing), and your SMTP provider for transactional mail. OpenAI and Anthropic process the model request you send through the proxy.