Privacy Policy

This Privacy Policy explains how Currai ("Currai", "we", "us", or "our") collects, uses, stores, shares, and protects information when you visit our website, create an account, use the Currai dashboard, send telemetry through our SDKs or APIs, or otherwise interact with our service.

Currai is an observability and prompt operations platform for LLM applications. Because the service is designed to receive production traces, you control what application data, prompts, completions, metadata, tags, and tool payloads you send to Currai.

Information you provide directly

We collect information you provide when you create an account, join or manage a workspace, contact support, configure billing, create prompts, run evaluations, or otherwise use the product. This may include your name, email address, workspace name, account settings, support messages, and billing details.

Telemetry and content you send to Currai

The core Currai service processes the data your application sends to us. This may include traces, spans, generations, prompts, completions, model names, token counts, cost estimates, latency, tool calls, retriever spans, session IDs, user IDs, tags, scores, eval results, metadata, and error details.

You decide what is included in each event. Do not send secrets, passwords, payment card numbers, health information, or regulated personal data unless you are authorized to do so and have appropriate agreements and safeguards in place.

Usage, billing, and operational data

We collect service usage records such as processed bytes, event volume, plan limits, retention windows, API activity, error logs, and billing status. Payments and tax handling are processed by Paddle; Currai does not store full payment card numbers.

Website and device information

When you visit our website or dashboard, we may collect basic technical information such as pages viewed, browser and device details, referral information, IP address, approximate location, cookies needed for authentication and security, and product usage events that help us understand and improve the service.

Core service delivery

We use information to provide Currai, including ingesting telemetry, storing and indexing traces, displaying dashboards, running evals, managing prompts, enforcing retention windows, calculating usage, processing billing, and supporting workspace administration.

Service improvement

We use aggregated and diagnostic information to debug errors, improve reliability, measure feature usage, understand performance, and prioritize product work. We may use account and usage information to communicate with you about service updates, security issues, billing, and support requests.

Security and compliance

We use information to protect Currai and our customers, including detecting abuse, investigating incidents, enforcing access controls, preventing fraud, complying with legal obligations, and maintaining audit and operational records.

Currai does not use the content of your traces, prompts, completions, tool calls, or eval data to train foundation models. We process that content to provide the service features you request, such as trace search, debugging, prompt management, eval workflows, and product analytics.

If Currai uses third-party AI infrastructure for a feature, we configure that processing to support the requested product behavior and not to train provider models on your submitted content, where the provider offers such controls.

Access to customer data is limited to authorized Currai personnel and service providers who need access to operate, secure, support, or improve the service. We use access controls, least-privilege practices, and operational safeguards to limit internal access.

We may access customer data to troubleshoot support requests, investigate security or abuse issues, comply with legal obligations, maintain the service, or build and improve Currai.

Service providers

We share information with vendors that help us operate Currai, such as hosting, database, authentication, analytics, email, payment, and infrastructure providers. These providers process information on our behalf under contractual obligations to protect it.

Current categories of providers include Clerk for authentication and user management, Convex for backend infrastructure and database services, Paddle for payments and tax handling, and cloud or AI infrastructure providers that support product functionality.

Third-party services

If you connect Currai to a third-party tool or direct Currai to send data to another service, information may flow between Currai and that service as needed to perform the requested action. The third-party service is governed by its own privacy terms and controls.

What we do not do

We do not sell your personal data. We do not use your trace content to train foundation models. We do not use customer telemetry for unrelated advertising.

Legal and safety disclosures

We may disclose information if required by law, legal process, government request, corporate transaction, or when we believe disclosure is necessary to protect our rights, users, service, or the public.

Currai uses technical and organizational safeguards designed to protect your information, including encryption in transit, access controls, least-privilege practices, monitoring, and operational review. No internet service is perfectly secure, but we work to protect customer data and improve our safeguards over time.

Currai may process and store data in the United States and other jurisdictions where we or our service providers operate. Where required, we rely on appropriate safeguards for international transfers.

Retention periods

Trace and telemetry data is retained according to your workspace plan, retention settings, and product configuration. Account, billing, security, and operational records may be retained for longer where needed for legal, tax, accounting, security, or legitimate business purposes.

Deletion upon request

You may delete data through the product where available or contact us at support@currai.app. We will process deletion requests within a reasonable period unless retention is required or permitted by law.

Account closure

If you close your account or workspace, we will delete or de-identify customer telemetry according to your plan, retention settings, and our backup and operational deletion cycles. Some records may be retained where required for legal, tax, billing, security, or dispute-resolution purposes.

Depending on your location, you may have rights to access, correct, export, delete, object to, or restrict certain processing of your personal data. You can exercise some rights directly in Currai or by contacting support@currai.app.

We may need to verify your identity before responding to certain requests. We will respond within the timeframe required by applicable law.

Currai does not currently respond to browser Do Not Track signals. Where legally required and technically feasible, we will honor recognized opt-out preference signals such as Global Privacy Control.

Currai is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and, where appropriate, provide additional notice. Continued use of Currai after changes take effect means you accept the updated policy.

Questions about this Privacy Policy or your data? Contact us at support@currai.app.