Legal
Privacy notice
This notice describes what the kLLM model key application collects, why it is collected and how long it is kept. It applies to the application form on this website and to the service that processes applications.
Last updated
What the application form collects
The application form collects the following fields:
| Field | Status |
|---|---|
| Name | Required |
| Email address | Required; used for verification and correspondence |
| Organization | Optional |
| Role | Optional |
| Country or region | Required; ISO 3166-1 alpha-2 code |
| Intended use | Required; free text |
| Requested models | Required; one or more official sealed models by name |
| Agreement to the terms | Required; stored with the time of agreement |
The service also stores a keyed hash of the IP address from which the application was submitted (the address itself is not stored), timestamps, the application status, the models granted, notes made by reviewers, records of key delivery links and an audit log of actions on the application.
Key files are never stored in the application database and are never sent by email; approved applicants download the key files of the granted models through one-time, expiring links.
Purpose
The data is used to review applications, to verify email addresses, to deliver the keys of the granted models to approved applicants and to correspond about the application. The hashed IP address is used to limit the rate of requests and to record actions in the audit log. The data is not sold and is not used for advertising.
Who can access the data
Application data is accessible to the administrators who review applications. Every administrative action, including viewing an application and exporting records, is recorded in the audit log. Emails are sent through the mail provider configured for the service.
Retention
Records are deleted or anonymized automatically. Anonymization removes the personal fields and the requested models; the status, the country or region and the timestamps remain for statistics. The defaults are:
| Records | Default retention |
|---|---|
| Applications whose email address was never confirmed | Deleted after 14 days |
| Rejected applications | Anonymized 90 days after the decision |
| Applications awaiting further information without activity | Anonymized after 180 days |
| Approved applications | Anonymized 730 days after approval |
| Audit log entries | Deleted after 730 days |
Expired administrator sessions and rate-limit counters are removed when the retention job runs, by default once a day.
This website
The website is a set of static pages. It sets no cookies and loads no analytics or advertising scripts. Fonts are served from the website itself. The theme preference is stored in the local storage of the browser and is not transmitted. The hosting provider may keep standard server logs.
When the online application service is not available, the form prepares an email in the local email client instead; nothing is sent until that email is sent.
Access, correction and erasure
To request access to, correction of or erasure of an application, write to the contact address below from the email address used in the application. Erasure anonymizes the application immediately and revokes any active key delivery link.
Contact
Agent Network, hi@anet0.com. Security vulnerabilities are reported through GitHub Security Advisories.