Data retention policy
Pylon Labs Inc. shall retain data as long as the company has a need for its use, or to meet regulatory or contractual requirements. Once data is no longer needed, it shall be securely disposed of or archived. Data owners, in consultation with legal counsel, may determine retention periods for their data. Personally identifiable information PII shall be deleted or de-identified as soon as it no longer has a business use.
Data archiving and removal policy
Data is hard deleted from systems on contract end - backups have a month turnover which will then remove any leftover customer data.
Data storage policy
Pylon Labs Inc. shall ensure that all restricted and confidential data is securely deleted from company devices prior to, or at the time of, disposal. Confidential and Restricted hardcopy materials shall be shredded or otherwise disposed of using a secure method. Personally identifiable information PII shall be collected, used and retained only for as long as the company has a legitimate business purpose. PII shall be securely deleted and disposed of following contract termination in accordance with company policy, contractual commitments and all relevant laws and regulations. PII shall also be deleted in response to a verified request from a consumer or data subject, where the company does not have a legitimate business interest or other legal obligation to retain the data. Pylon users have the option to create a manual deletion request, which Pylon will complete within appropriately disclosed SLAs. Users will also have the option to determine whether to have specific messages redacted, or have entire conversations deleted.
Data center location(s)
United States, Germany
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
OpenAI, Anthropic
LLM retention settings
We have Zero Data Retention agreements with both vendors
LLM data tenancy policy
We have Enterprise agreements and Zero Data Retention agreements with OpenAI and Anthropic. Data is isolated from their other customers.
LLM data residency policy
For our vendors OpenAI and Anthropic, data processing happens in the US.