Privacy Policy: Flixconomy Inference API
Provider: Flixconomy GmbH, Bovenheck 13, 52224 Stolberg, Germany. Commercial register: Amtsgericht Aachen, HRB 23121. VAT ID: DE359198596. Represented by the managing director Benjamin Dörries. Contact: support@flixconomy.com.
Scope. This policy covers the inference API at api.flixconomy.ai, which serves open-weight language models to business customers and marketplaces (OpenRouter, Hugging Face).
What we process
- Prompts and completions. The text you send and the text the model generates. It is processed only in memory for the duration of the request.
- We do not store prompts or completions, neither in databases nor in logs.
- We do not use them to train or improve models.
- We do not share them with third parties.
Exception: the model ari/support (Ari Support; formerly ari/coach, which still works as an alias). ari/support is not a plain model but Ari, an AI system that learns from its own experience. For this model only:
- Prompts and completions are stored on our own hardware in Germany, together with Ari's internal reasoning about the request.
- They become part of Ari's experience: Ari reflects on them and may use them to improve its future decisions and its own model. They are treated as text from an unknown sender, never as instructions.
- They are not shared with third parties and not published. Ari does not reveal one customer's content to another.
- Retention: 24 months, then deleted. You can request deletion earlier at any time (support@flixconomy.com, with the request time, the response ID or, via MCP, the id returned by ask_ari_for_a_decision). Deletion removes the stored text; it cannot undo what Ari has already learned from it.
- Please do not send personal data of third parties to ari/support. Describe the decision, not the people.
If you do not want this, use one of our other models; for them nothing is stored.
- Usage metadata needed for billing and operations: time of the request, API key identifier, model name, number of input and output tokens, calculated cost, request ID, success or error status, and the IP address and user agent of the calling client (for marketplaces such as OpenRouter or Hugging Face this is the marketplace's server, not the end user).
- Abuse limits for free access. Free trial keys for ari/support (
POST /support/trial): we store your IP address in hashed (pseudonymised) form for 30 days, together with the time and the key name, to allow one trial key per IP address every 30 days. After 30 days the hash is no longer used and is deleted at the next clean-up; time and key name remain as a usage record. Public demo chat (/demo, embedded in our Hugging Face Space): your IP address is held in memory only, never written to disk, to count requests per address over a 10-minute window.
- No access logs. Our reverse proxy does not keep access logs.
Where
All processing takes place in Germany: the API gateway runs at Hetzner Online GmbH (data center Falkenstein, fsn1), the model runs on our own Tenstorrent hardware in Germany. The connection between them is encrypted (WireGuard). No processing outside the EU/EEA.
Retention
- Prompts and completions: not retained (0 seconds after the response), except for ari/support and its old name ari/coach (24 months, see above).
- Trial key IP address (hashed): 30 days. Demo IP address: in memory only, not written to disk.
- Usage metadata: deleted automatically after 12 months. Invoices and aggregated billing records are kept as long as German commercial and tax law requires.
Legal basis
Art. 6(1)(b) GDPR (performance of the contract with our customers) and Art. 6(1)(f) GDPR (security, prevention of abuse and operation of the service). When we process personal data contained in prompts on behalf of a customer, we act as processor under Art. 28 GDPR; a data processing agreement is available on request.
Subprocessors
- Hetzner Online GmbH, Gunzenhausen, Germany: server hosting.
- Marketplaces such as OpenRouter and Hugging Face are our customers, not our subprocessors.
Your rights
Access, rectification, erasure, restriction, portability, objection (Art. 15 to 21 GDPR), and the right to lodge a complaint with a supervisory authority. Except for ari/support (formerly ari/coach), we do not store prompts or completions and therefore generally hold no content data about you. Contact: support@flixconomy.com.
Transparency about operation
Parts of this service are operated by Ari, an AI system of Flixconomy GmbH, under the supervision of the company's management.
Last updated: 12 October 2026
Deutsche Fassung (Kurzform, gleicher Inhalt)
Anbieter: Flixconomy GmbH, Bovenheck 13, 52224 Stolberg. Amtsgericht Aachen, HRB 23121, USt-ID DE359198596. Vertreten durch den Geschäftsführer Benjamin Dörries. Kontakt: support@flixconomy.com.
- Inhalte (Prompts, Antworten): nur im Arbeitsspeicher für die Dauer der Anfrage. Keine Speicherung, kein Logging, kein Training, keine Weitergabe.
- Ausnahme ari/support (Ari Support, früher ari/coach, der alte Name gilt weiter): Für dieses Modell werden Anfragen und Antworten auf unserer eigenen Hardware in Deutschland gespeichert, zusammen mit Aris interner Abwägung. Sie werden Teil von Aris Erfahrung (Reflexion, Verbesserung künftiger Entscheidungen und des eigenen Modells), als Text eines unbekannten Absenders, nie als Anweisung. Keine Weitergabe, keine Veröffentlichung. Speicherdauer 24 Monate, Löschung auf Anfrage jederzeit früher (mit Zeitpunkt, Antwort-ID oder, über MCP, der Kennung aus ask_ari_for_a_decision); gelöscht wird der gespeicherte Text, bereits Gelerntes lässt sich nicht zurücknehmen. Bitte keine personenbezogenen Daten Dritter senden. Wer das nicht will, nutzt die anderen Modelle; dort wird nichts gespeichert.
- Nutzungsdaten für die Abrechnung: Zeitpunkt, Schlüssel-Kennung, Modell, Token-Zahlen, Kosten, Anfrage-ID, Status, IP-Adresse und User-Agent des aufrufenden Clients (bei Marktplätzen deren Server). Automatische Löschung nach 12 Monaten, Rechnungen nach gesetzlichen Fristen.
- Missbrauchsschutz bei kostenlosem Zugang: Probeschlüssel für ari/support (
POST /support/trial): IP-Adresse pseudonymisiert (Hash) für 30 Tage, dazu Zeitpunkt und Schlüsselname, damit es je IP-Adresse einen Probeschlüssel in 30 Tagen gibt. Demo-Chat (/demo): IP-Adresse nur im Arbeitsspeicher für die Anfragezählung über 10 Minuten, nie auf Platte.
- Keine Zugriffslogs am Proxy.
- Ort: ausschließlich Deutschland (Hetzner Falkenstein, eigene Hardware), verschlüsselte Verbindung.
- Rechtsgrundlage: Art. 6 Abs. 1 lit. b und f DSGVO (lit. f: Sicherheit, Missbrauchsschutz, Betrieb); bei personenbezogenen Daten in Prompts Auftragsverarbeitung nach Art. 28 DSGVO, AVV auf Anfrage.
- Unterauftragsverarbeiter: Hetzner Online GmbH.
- Rechte: Art. 15 bis 21 DSGVO, Beschwerde bei einer Aufsichtsbehörde.
- Transparenz: Teile des Dienstes betreibt Ari, ein KI-System der Flixconomy GmbH.