In force since 24 Oct 2026[email protected]
Foresight Labs runs foresight-labs.eu and nodecode.ai. This page lists the personal data we hold, why, who helps us and for how long. The same text stands on both sites.
01Who we are
- Foresight Labs
- Chamber of Commerce (KVK): 97182214
- VAT: NL005254718B58
- Email: [email protected]
02What we hold
- Your account: email address, name, a picture if your sign-in provider gives one, and each session's network address and browser.
- Your usage: per API request, the time, the key or machine that sent it, the model, the tokens, the duration and the cost.
- Your payments: your plan, its status and dates, and your top-ups. Card details stay with Stripe.
- What you give us: support tickets, mail, API key names, linked machines, and cells you submit to the hub.
- Your country, looked up from your network address on our own server. It sets prices in euros or dollars.
03Prompts and outputs
On the nodecode.ai API, prompts and outputs are encrypted in transit and pass through our servers in memory. We never store, log or train on them. The models run on our own hardware in Europe.
With your own key (BYOK), they go straight to your provider, under its privacy policy.
04Why we use it
- Running your account, taking payment, providing the service: our contract with you.
- Keeping payment and tax records: the law.
- Security, stopping abuse, the audit log: our legitimate interest.
- Mail about our products to customers: our legitimate interest. Each such mail has an unsubscribe link.
05Mail
We mail sign-in codes, confirmations, and anything about your account or payments.
Customers also get occasional mail about our products. Unsubscribe with the link in any such mail, or write to us.
06Who helps us
- Stripe: payments.
- Hetzner: our servers, in Germany.
- Cloudflare: our domain names and the check on the sign-in form.
- mailbox.org: our mail.
- GitHub, Google or Telegram: only when you sign in with one.
We never sell your data.
Some processors work outside the EU. The EU-US Data Privacy Framework or the EU's standard contractual clauses cover those transfers.
08How long
- Sessions: 7 days after last use.
- Request log: 90 days.
- Mail log: 30 days.
- Accounts never confirmed: 14 days.
- Payment and tax records: at least 7 years, as Dutch tax law requires.
- The audit log of account actions: kept.
- Everything else: until you close your account.
09Your rights
You may see, correct, delete or copy your data. You may object to or limit how we use it.
Most of this you do yourself under Profile in your account, closing it included. For the rest, write to [email protected].
You may also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
