Privacy Policy
Minimorsel Enterprises Pvt. Ltd. ("we", "us"). Effective 27 October 2026. Applies to the GetCortex27 API and this website.
1. Summary
We operate an inference API. We do not store, log, or train on the prompts you send or the completions we return. We keep a small amount of request metadata to bill you and to keep the service reliable. We do not sell personal data.
2. What we process, and for how long
| Data | Stored? | Retention | Purpose |
|---|---|---|---|
| Prompt content (messages, tool definitions, tool results, images) | No. Held in memory only for the duration of the request, then discarded. | 0 days | Generating the response |
| Completion content (text, reasoning, tool calls) | No. Streamed to you and discarded. | 0 days | Generating the response |
| Request metadata: timestamp, API key identifier, model and version, input/output/reasoning token counts, HTTP status, latency, datacenter region | Yes | 13 months | Billing, capacity planning, abuse prevention, reliability monitoring |
| Account data: name, company, email, billing details | Yes | Duration of the account plus 7 years for invoices, as required by tax law | Account administration, invoicing, legal compliance |
| Website access logs (IP address, user agent, page requested) | Yes | 30 days | Security and abuse prevention |
Prompt and completion content is never written to disk, to application logs, or to any analytics or monitoring system. Error logs record status codes and error classes, not content.
3. No training
We do not use your prompts, completions, or any derivative of them to train, fine-tune, evaluate or improve any model, and we do not permit any third party to do so.
4. Where processing happens
Inference is performed in the datacenter region through which your request is routed, currently the European Union (Romania). A request is processed entirely within its region. We will publish additional regions as they become available. Our infrastructure providers (GPU hosting) are listed on request and act as sub-processors under written terms that prohibit access to request content.
5. Legal bases (EEA/UK customers)
We process request metadata and account data to perform our contract with you and to comply with legal obligations (tax, accounting). Where you send us personal data inside prompts, you are the controller and we act as your processor; a data processing agreement is available on request.
6. Your rights
You may request access to, correction of, or deletion of your account data, and object to or restrict its processing, by emailing the address below. Because prompt and completion content is not retained, there is nothing to export or delete for it. We respond within one month. EEA residents may lodge a complaint with their supervisory authority.
7. Security
Traffic is encrypted in transit (TLS 1.2+). API keys are stored hashed. Access to production systems is limited to named individuals with multi-factor authentication. We will notify affected customers of a personal-data breach without undue delay and, where required, within 72 hours of becoming aware of it.
8. Routing partners
If you reach us through a routing service (for example OpenRouter), that service's privacy policy governs what it retains. Our handling of the request once it reaches us is as described above.
9. Changes
We will post changes to this page with a new effective date. Material changes affecting retention will be announced to account holders by email at least 30 days before they take effect.
10. Contact
Minimorsel Enterprises Pvt. Ltd., Gurugram, Haryana, India. Email: utkarshvaibhav22@gmail.com.