Privacy Policy

Who this policy covers.

Web5 Labs LLC (“Web5 Labs,” “Empire LLM,” “we,” “us”) owns and operates Empire LLM. This Privacy Policy describes how we handle personal information when you visit, create an account, purchase access, contact us, or use Empire LLM’s websites, apps, interfaces, model-routing features, and related services (the “Service”).

This policy does not cover third-party websites or services under their own control. If your employer or another organization provides your account, that organization may separately control information associated with its workspace.

Data enters in three ways.

Information you provide

• Account and contact data, such as username, email address, password hash, and support communications.
• User content, including prompts, messages, responses, conversations, uploaded files, audio, feedback, and model or research selections.
• Configuration data, such as language, theme, model preferences, connected-provider status, and encrypted or otherwise protected provider credentials you choose to save.
• Transaction data, such as tier, purchase status, payment-provider reference, and limited billing metadata. Payment providers process full payment-card details; we do not need to store them.

Information collected automatically

• Device, browser, operating system, IP address, timestamps, requested pages, referring URLs, and session identifiers.
• Usage, diagnostic, routing, error, security, performance, and abuse-prevention logs.
• Local browser storage and cookies described in our Cookie Policy.

Information from others

We may receive account or transaction confirmation from authentication and payment providers; model metadata and results from AI providers; and information from people who communicate with us or refer you to the Service.

We use data to run and protect Empire.

• create and authenticate accounts, remember preferences, and provide support;
• route requests, process files, generate outputs, and operate research, speech, and trust features;
• complete purchases, provision tiers, maintain entitlements, and prevent payment fraud;
• monitor reliability, debug errors, measure feature performance, and improve user experience;
• detect abuse, protect credentials, enforce our Terms, and secure users and systems;
• communicate service, safety, support, transactional, and policy notices;
• comply with law, respond to lawful process, and establish or defend legal claims; and
• create aggregated or de-identified statistics that are not reasonably linkable to you.

Depending on the context and jurisdiction, our legal bases include performing a contract with you, our legitimate interests in operating and securing the Service, consent, and compliance with legal obligations.

Your selected route determines where content goes.

To answer a request, Empire LLM may transmit your prompt, relevant conversation context, files or extracted text, configuration, and necessary technical metadata to the model, search, embedding, speech, or other provider selected by you or by the Service’s routing logic. Multiple providers may receive substantially similar content in Council mode.

Do not submit personal data about others, confidential business information, regulated data, or sensitive personal information unless you have permission and have determined that the selected providers and settings are appropriate.

Service providers see only what their job requires.

We may disclose personal information to:

• AI, model-routing, search, embedding, speech, and document-processing providers that perform your request;
• hosting, storage, database, security, email, support, authentication, and performance vendors;
• payment processors such as Stripe and financial institutions needed to complete a transaction;
• professional advisers, auditors, insurers, and corporate transaction participants under appropriate obligations;
• government authorities or other parties when required by valid legal process or reasonably necessary to protect rights, safety, security, and the integrity of the Service; and
• a successor in a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to applicable law.

We may disclose aggregated or de-identified information that cannot reasonably identify you. We do not permit a service provider to use personal information we give it for its own cross-context behavioral advertising.

Your information is not our inventory.

Empire LLM does not sell personal information. We also do not rent it or share it for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws. We do not knowingly sell or share the personal information of anyone under 16.

Disclosing data to a processor so it can provide hosting, payment, security, authentication, or an AI response is a service-provider disclosure—not a sale—when handled as described here. If our practices change, we will update this policy and provide any notice and opt-out rights required by law.

Different data has different clocks.

• Account data is generally kept while your account remains active and for a limited period afterward for security, support, legal, and legitimate business needs.
• Conversations remain until you delete them, close the account, or we remove them under an applicable retention rule. A hard-delete request removes the active conversation record, subject to limited backups and legal holds.
• Uploaded attachments are designed to expire automatically after approximately 24 hours, though temporary copies, extracted data already included in a conversation, backups, or legal holds may persist longer.
• Security, transaction, audit, and diagnostic records are kept for periods reasonably necessary for fraud prevention, accounting, dispute resolution, compliance, and system integrity.
• Browser preferences remain on your device until they expire or you clear them.

Third-party providers apply their own retention schedules. We may retain de-identified information where it cannot reasonably be linked back to you.

We use safeguards, not absolutes.

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including access restrictions, credential protection, secure transport, logging, and abuse controls appropriate to the Service. No internet service, model provider, or storage system can guarantee perfect security.

You help by using a strong, unique password, protecting provider keys, keeping devices secure, and promptly reporting suspected compromise to team@empirellm.com.

You can control more than the theme.

Depending on where you live, you may have the right to request access, a copy, correction, deletion, or restriction of personal information; object to certain processing; withdraw consent; or appeal a denied request. You may also delete individual conversations and manage browser storage through your device.

Send a request to team@empirellm.com. Describe the request and the account email or username involved. We may need to verify your identity and authority. Authorized agents may submit requests where law permits. We will not unlawfully discriminate against you for exercising privacy rights.

We may deny or limit a request where an exception applies, including security, fraud prevention, legal obligations, another person’s rights, or inability to verify the request. You may appeal by replying with “Privacy Appeal” in the subject line.

Local law may provide additional rights.

United States

Residents of states with comprehensive privacy laws may exercise applicable rights described above. In the preceding 12 months, we may have collected the categories described in Section 2 and disclosed them for business purposes to the recipients in Section 5. We do not sell personal information or share it for cross-context behavioral advertising.

EEA, United Kingdom, and Switzerland

Where applicable, you may lodge a complaint with your local data-protection authority. If personal data is transferred to a country without an adequacy decision, we rely on lawful safeguards where required, such as standard contractual clauses, or another permitted transfer mechanism.

International use

Web5 Labs and its providers may process information in the United States and other countries whose laws differ from yours. We apply this policy wherever we process covered personal information.

Empire is not a children’s service.

The Service is intended for users 18 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided it, contact us so we can investigate and delete it as required.

Privacy questions belong in the open.

We may update this policy as the Service, providers, or law changes. We will post the updated policy with a new effective date and provide additional notice where required. Material changes apply prospectively unless law requires otherwise.