Courtesy translation. The Spanish text at solargpu.es/privacidad is the one that applies.
Privacy and data retention policy — SolarGPU inference service
Controller. Acceleration Robotics S.L.U. (SolarGPU brand), Spanish tax ID B01952092, registered office in Vitoria-Gasteiz, Araba/Álava (Spain), email hola@solargpu.es.
What service it covers. The execution of open-weight artificial intelligence models on our nodes, accessible by API directly or through intermediary platforms (OpenRouter, Hugging Face or others). This policy applies to the data that transits that API.
Where the data is processed. All nodes are in Spain (European Union). No request is processed or transferred outside the European Economic Area.
What we do NOT do.
- We do not store or log the content of requests (prompts, messages, files) or of the generated responses. The content exists in memory during execution and is discarded when the request completes. It is what the platforms call zero data retention.
- We do not use request content to train, fine-tune or evaluate models, neither our own nor third parties'.
- We do not sell or share data with third parties.
What we DO log, and for how long. To bill and operate the service we keep metadata for each request: date and time, identifier of the key or platform sending it, model, number of input and output tokens, duration, status code and, if the request comes over the open internet, the source IP address. This metadata is kept for 12 months for billing and security obligations, and is then deleted or aggregated without identifiers. Technical error logs may include fragments of a request only when the request itself is malformed; they are kept for 7 days.
Legal basis. Performance of the service contract (GDPR art. 6.1.b) for billing metadata; legitimate interest in service security (art. 6.1.f) for access logs; legal obligation (art. 6.1.c) for keeping billing records.
Processor and controller. When the customer sends us third-party personal data inside a request, we act as a data processor on the customer's behalf, under the instructions of this policy. We sign a data processing agreement (GDPR art. 28) on request.
Sub-processors. None for request content. Network and billing infrastructure: Clouding.io (Barcelona, EU) for internet egress; Stripe Payments Europe for direct-customer billing.
Security. Encryption in transit (TLS 1.2 or higher), revocable API keys, per-container workload isolation, key-based administrative access and access logging.
Rights. You can exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to hola@solargpu.es, and lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Changes. We will publish changes at this same address with their date. Version 1.0, 10 September 2026.