This Privacy Policy describes how Dumbell2 LLC (“Dumbell2,” “we,” “us,” or “our”) collects, uses, and discloses information in connection with the inference-relay library and related services (collectively, the “Service”).
We organize information collection into three tiers. Understanding these tiers is central to understanding inference-relay’s privacy architecture.
When you create an account, we collect identifying and billing information necessary to provide the Service:
The inference-relay library transmits metadata-only telemetry to power your dashboard and enforce license terms. This includes:
inference-relay does not collect, transmit, store, inspect, log, cache, or process prompt content, completion content, system messages, function or tool definitions, function or tool responses, images, files, or attachments sent to AI providers. Your API keys are used locally within the library and are never transmitted to Dumbell2 servers. This is not a policy decision — it is an architectural guarantee. See Section 9 (“The Dumb Pipe Guarantee”) below.
We use the information described above for the following purposes:
We use the following third-party service providers to operate the Service. Each sub-processor receives only the data necessary to perform its function.
AI providers (Anthropic, OpenAI, Google, and others) are your providers, not ours. inference-relay connects your code directly to your provider accounts using your own API keys or subscriptions. We do not have a data processing relationship with your AI providers on your behalf.
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 90 days |
| Usage metadata | 12 months, then aggregated and anonymized |
| Billing records | As required by applicable law |
| Content data | N/A — never collected |
Upon account deletion, we remove your account data within 90 days. Anonymized, aggregate telemetry that cannot be linked to your identity may be retained indefinitely for service improvement purposes.
Depending on your jurisdiction, you may have the following rights with respect to your personal data:
To exercise any of these rights, contact us at privacy@inference-relay.com. We will respond within 30 days.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children under 18. If you are under 18, you may not use the Service. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that data promptly.
Dumbell2 LLC operates from the Dubai International Financial Centre (DIFC). Your personal data may be transferred to, stored, and processed in jurisdictions outside of your country of residence, including the United States (where our sub-processors may maintain infrastructure). By using the Service, you consent to such transfers. We ensure that any international transfers of personal data are subject to appropriate safeguards, including standard contractual clauses or equivalent mechanisms recognized under applicable data protection laws.
This is not a policy commitment that could be changed. It is an architectural property of the software. The inference-relay library runs entirely within your local environment. Content flows directly from your code to your AI provider. Our servers never sit in the content path.
The telemetry system is enforced at the type system level. The AuditEvent interface types promptContent as literal false, not boolean. There is no code path that could transmit content even if a developer attempted to modify the library.
We maintain a public TELEMETRY_AUDIT.md file in the library repository and run a CI scan on every release to verify that no code path exists that could transmit prompt or completion content.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (to the address associated with your account) or by posting a prominent notice on the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the changes.
This Privacy Policy shall be governed by and construed in accordance with the laws of the Dubai International Financial Centre (DIFC), notwithstanding any conflict of law provisions. Any disputes arising from or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the DIFC Courts.
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: