Privacy Policy
This policy explains what data LLMFirewall collects and who controls it. LLMFirewall is one of several early-stage products built and operated by AppTechLab, which acts as the data controller for all of them.
Who controls your data
AppTechLab (apptechlab.com) is the data controller for information collected through this page, not LLMFirewall individually. This gives you one place to ask about, correct, or delete your data across every AppTechLab product.
What we collect
- Email address — only if you submit the "Reserve early access" form, together with a timestamp and the consent you gave at signup.
- Anonymous page views — the page path and referrer for each visit, with no cookies, no IP storage, and no identifier tied to you personally.
- Live-demo activity log — every prompt you send through the "Try the live demo" box is recorded as one row with a timestamp, whether it was blocked, and which finding types matched (e.g. "pii_ssn"). The prompt text, the model's response, and the specific matched value are never written to that log — only the category. A rough estimated cost in USD is recorded for that request.
What we don't collect
No cookies are set by this page. No third-party advertising or tracking pixels are loaded. No payment information is collected — this page has no live payment processing. Your IP address is never stored in readable form; it is hashed with a server-side secret salt before being used to enforce the demo's rate limit, and that hash is not linked to your email or to any activity-log row.
About the live demo specifically
Prompts you type into the demo that pass the firewall's checks are sent to Google's Gemini API to generate a real response — do not paste anything you would not want a third-party AI provider to process. Prompts that trip the PII or injection detectors are never sent to Gemini at all.
How we use it
Your email is used to notify you when LLMFirewall opens for self-serve access, and occasionally about other AppTechLab developer tools. It is never sold or shared with third parties.
Your rights
You can ask AppTechLab to access, correct, or delete your data at any time by emailing the contact
address on apptechlab.com, or by calling POST /api/delete-account with your email — this
removes your signup record and logs a one-way hash of the deletion for audit purposes only. As part of
AppTechLab's data retention policy, data belonging to a discontinued product is deleted within 30 days
of that product's retirement.
Storage
Data is stored with Supabase, our database provider. The signup and page-view tables are protected by a row-level security policy that restricts this page to inserting new records only — it cannot read, modify, or delete existing rows. The live-demo activity log has no public read or write access at all; only the server-side firewall function can write to it, and only the server-side dashboard endpoint can read from it (and only returns type + minute-rounded time, never a full row).