Privacy Policy

This Privacy Policy explains what information Topo Labs (“we” or “us”) collects when you use the Topo website, dashboard, API and SDKs (the “Service”), how we use it and the choices you have. We decide how account and usage information is used. For the content of your requests, we act on your behalf.

In short: requests are encrypted in transit, served from memory and not stored by default. We keep the metadata we need to route, bill and secure the Service, and we do not sell personal information.

Account information

Your name, email address, team name and role, and the settings you choose in the dashboard.

Wallet and payment information

Deposit and wallet addresses, on-chain transaction hashes, balances and top-up history. Enterprise customers invoiced in fiat also give us billing contacts and company details. We do not collect card numbers.

Usage metadata

For each request: the request ID, API key, model, token counts, latency, region, serving node, cost, receipt and timestamps, and the IP address the request came from.

Support and communications

Messages you send us and your newsletter preferences.

Website data

Basic technical information such as browser type, pages visited and referring site, and preferences such as your language, stored in your browser.

• Requests are encrypted in transit between your application, the Topo Router and the node that serves them.
• Prompts and outputs are processed in memory and are not stored by default, by us or by node operators. Operators agree not to log, store or inspect request content.
• A sample of requests is re-run by independent attestors to verify outputs. Attestors handle sampled requests the same way: encrypted in transit, processed in memory and not stored.
• When you call a model that is provided by its developer, the request is sent to that developer, and its own terms and privacy policy also apply.
• We do not use your prompts or outputs to train models.

Receipts record metadata such as the model, token counts and cost. They do not contain the text of your prompts or outputs.

• to provide the Service: authenticate requests, route them to nodes, enforce key scopes and spend limits, and settle payments;
• to verify outputs, detect abuse and fraud, and keep the Service secure;
• to show you usage, spend and audit logs in the dashboard;
• to provide support and send service messages, such as receipts, security alerts and changes to our terms;
• to improve the Service using aggregated metadata, such as latency by region;
• to comply with the law and enforce our Terms of Service.

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interest in running a secure and reliable network, your consent where we ask for it, and our legal obligations.

Top-ups, settlement batches and operator payouts happen on public blockchains (Base and Solana). The wallet addresses, amounts and transaction hashes recorded there are public and permanent. We cannot change or delete data on a public blockchain, and anyone may link a wallet address to its other activity.

Node operators and attestors

receive the requests they serve or verify, with the metadata needed to do so. They do not receive your account details.

Model developers

receive requests to the models they provide, as described above.

Service providers

such as hosting, email and analytics vendors, who process information for us under contract.

Legal and safety

when we believe in good faith that disclosure is required by law, or needed to protect the rights, property or safety of our users, the public or Topo Labs.

Business transfers

if we are involved in a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.

We do not sell personal information, and we do not share it for targeted advertising.

By default, the router may serve a request in any region where an eligible node is available. On Max and Enterprise plans you can pin traffic to a region or a private node pool, so requests are served only there.

Account and usage information may be processed in countries other than yours. Where the law requires it, we use appropriate safeguards for these transfers, such as standard contractual clauses.

Prompts and outputs

not stored by default.

Usage metadata and receipts

kept for as long as we need them for billing, audit logs, security, and our legal and tax obligations.

Account information

kept while your account is open, then deleted or anonymized within a reasonable period, unless the law requires us to keep it longer.

On-chain data

permanent, as explained above.

We protect information with encryption in transit, scoped API keys, access controls and audit logging. No system is perfectly secure. Our Security page describes our practices and how to report a vulnerability.

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request, write to support@topolabs.ai from the email address on your account. We will respond within the time the law requires.

You can also update your account details in the dashboard, and unsubscribe from the newsletter with the link in any issue. If you are not satisfied with our response, you may complain to your local data protection authority.

We use cookies and browser storage that are needed to keep you signed in, keep the Service secure and remember preferences such as your language. We do not use advertising cookies.

The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy from time to time. We will post the new version on this page with a new “Last updated” date, and tell you about material changes by email or in the dashboard.

Questions or requests about privacy? Write to support@topolabs.ai.