Privacy notice
Last updated: 2026-10-06 · If the language versions differ, the Spanish version prevails.
1. Who is responsible
Gerardo Javier Garza Treviño, an individual with business activity, domiciled at Paseo de los leones 2342 local 4 Monterrey, Nuevo Leon, Mexico, is responsible for your personal data on enjambreia (enjambreia.com). Privacy contact: [email protected].
2. What data we collect
Account: your email and your password (stored hashed with PBKDF2, never in plain text). Usage: model, tokens, cost and date of each request. Payments: amount and status; your card details are handled by Stripe and never reach us. If you lend your GPU: technical node metrics (latency, availability, models offered and its tunnel address) and, if you had an earlier balance, your Stripe Connect account to withdraw it. If you contact us or request a pilot: your name, email, company and message.
3. The content of your requests
We don't store the text of your prompts or of the answers. Only a small sample is stored temporarily to audit that nodes don't cheat, and it is deleted as soon as it's audited; each job leaves a receipt with SHA-256 fingerprints, which can't be used to rebuild the text. To answer you, your request is processed according to the path you choose: on Cloud (A) it's sent to AI model providers; on Swarm (B) it's processed by a node's GPU, which may be yours, your private group's, or other people's in the public swarm. Don't send sensitive information through the public swarm: use your own GPU or a private group.
4. What we use your data for
To provide the service, charge you and pay you, prevent fraud and abuse, support you and improve the product with usage statistics. We don't sell your data or use it for advertising. You can object to analytics by writing to us.
5. Who we share it with
Only with providers we need to operate, each for its own function: Stripe (payments), MongoDB Atlas (database), Hetzner (servers), Cloudflare (network and security), Resend (email), PostHog (usage statistics), Sentry (errors) and, on the Cloud path, AI model providers. Some are in the United States or the European Union, so your data may be transferred outside your country with the safeguards those providers offer. We would also hand it to an authority if the law requires it.
6. What your browser stores
Your browser stores your session and your language (local storage) so you don't have to log in again. We don't use advertising cookies or third-party tracking cookies.
7. How long we keep it
As long as you have an account. If you delete it, we erase your personal data; accounting records (usage and payments) are kept without data that identifies you for as long as tax law requires.
8. Your rights
You can access, correct and delete your data or object to its use and, if you're in the European Union, also request portability and restriction of processing. From your dashboard you can download all your data and delete your account at any time; for anything else, write to [email protected] and we'll answer within 20 business days at most. You can also contact the data protection authority in your country.
9. Security
Everything travels encrypted (HTTPS/TLS 1.3), passwords are stored with PBKDF2 and every job is signed. More detail in Security.
10. Changes to this notice
If we change this notice, we'll publish the new version here with its date and, if the change is important, we'll let you know by email.
11. The Connections agent
If you connect apps in Connections (email, spreadsheets, chat, etc.) and ask the agent for work, we keep a history of each run: what you asked, what it did, what your apps returned and what you approved, so you can review it and approve what is pending. That history and your connections' URLs and tokens are stored encrypted; only you see them in your dashboard, we don't read them, and the history deletes itself after 90 days. To do its work, the agent sends data to the apps you connected and, if you turn on alerts, a short text to the ntfy service you chose; those services handle the data under their own policies. Anything that sends, writes or deletes only runs when you approve it. You can download all of this with your data, and if you delete your account your connections, scheduled tasks and history are erased.