drillr privacy & data

This Privacy Policy explains how LIL GREBE INC. ("drillr," "we") collects, uses, shares, and protects your personal information.

Account: email, password hash, name (if provided), organization (if provided)

Commercial: billing address, tax info, payment method (processed by third-party processors)

Technical: IP address, User-Agent, device type, browser, OS, timezone

Usage data: queries you submit, API endpoints called, call frequency, summaries of returned outputs, error logs

Support communications you send to support@lil-grebe.com or legal@lil-grebe.com

Provide and maintain the Service : account management, authentication, quota enforcement, billing, customer support

Improve the Service : usage analytics, debugging, product research, model quality evaluation (see Section 3)

Security : abuse monitoring, fraud prevention, account moderation, vendor compliance audits

Compliance : legal obligations, response to valid government or judicial requests

Account data: for the life of your account + 30-day grace period after deletion

Usage logs (for security and billing): 12 months

Billing and tax records: minimum period required by law (typically 7 years)

Backups: rolling daily backups, up to 90 days

Retention : 12 months, after which the underlying rows are permanently deleted (monthly partition rotation).

Data is primarily stored in the United States (AWS / Vercel U.S. regions)

If you are located in the European Economic Area, the U.K., or Switzerland, your data will be transferred to the U.S. in reliance on Standard Contractual Clauses (SCCs) and equivalent safeguards

Service providers : hosting (AWS, Vercel, Cloudflare), payment processing (Stripe, etc.), email service, customer support tools, product analytics — all under data processing agreements

Delete : request deletion of your account and data, subject to legal obligations

Access and export : receive a copy of personal information we hold about you

Correct : correct inaccurate information

Delete : request deletion of your account and data, subject to legal obligations

Object : object to processing based on legitimate interests

Data portability : receive your data in a machine-readable format

Withdraw consent : at any time (does not affect prior lawful processing)

We do not sell your personal information (as "sale" or "share" is defined under CCPA).