Privacy Policy

Last updated: July 19, 2026

This Privacy Policy explains how Reinforce42 / monkey ("we," "us," "our") collects, uses, discloses, and protects personal information when you use reinforce42.com and our API (the "Service"). We are based in Carlsbad, California, and serve customers in the United States. This Policy is designed to comply with the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA") and CalOPPA.

The short version: We collect the minimum needed to run the Service and bill you. Your prompts and generated content run on our own hardware, are not used to train models, and are not sent to any third-party AI provider. We do not sell or "share" (for cross-context advertising) your personal information.

Ad attribution. If you arrive from an ad, we store the ad platform's click identifier (e.g. gclid) in your browser's local storage and on our own server alongside your order, to measure which ads work. This is first-party only — no third-party trackers, pixels, or scripts run on this site, and we never share your identity with ad platforms.

1. Information we collect

CategoryExamplesSource
Account & contactemail address, API key metadatayou
Mobile number (optional)the mobile number you enter on our SMS sign-up page, plus the date, IP address, and exact consent wording, kept as proof of your consentyou
Paymentbilling tokens, last-4, transaction records (full card handled by Stripe, not us)you, via Stripe
Usage & logsrequests, tokens/seconds used, model, timestamps, cost, IP address and approximate location (city/region) for security and abuse preventionautomatic
Inputs & Outputsprompts, images, audio, files you submit, and the content generated for youyou / the Service
Device & local storageessential browser localStorage (your API key for the portal, theme). We do not use advertising or cross-site tracking cookies.automatic

2. How we use it

3. How we share it

We do not sell your personal information and do not "share" it for cross-context behavioral advertising. We disclose personal information only to:

4. AI inputs & outputs

We process your Inputs solely to generate Outputs and provide the Service. We do not use your Inputs or Outputs to train or fine-tune models, and they are never transmitted to a third-party AI provider — all inference runs on hardware we own and operate. Inputs, Outputs, and generated media are retained transiently to deliver and, for media, to make results downloadable (currently up to 14 days), then deleted, except where we must retain records for legal, billing, or safety reasons.

5. Retention

We retain personal information only as long as necessary for the purposes above: account and billing records for as long as your account is active and as required by law; usage/request logs for up to 90 days; generated media for up to 14 days. We then delete or de-identify it.

6. Security

We use technical and organizational safeguards including encryption in transit (HTTPS), API-key authentication, network isolation (private hardware behind localhost-bound tunnels), access controls, firewalls, and monitoring. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

To exercise a right, email privacy@reinforce42.com from your account email. We will verify your request and respond within the timeframes required by law. You may use an authorized agent.

8. Children

The Service is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18 (or under 13 in any event). If you believe a child provided us information, contact us and we will delete it.

9. Do Not Track & cookies

We do not use advertising or cross-site tracking cookies and do not respond to "Do Not Track" signals differently because we do not track you across sites. See our Cookie Policy for the essential local storage we use.

10. SMS and text messaging

Text messaging is entirely optional and is never a condition of buying credits or using the API. You only receive texts from us if you enter your mobile number and actively check the consent box on our SMS sign-up page.

Mobile information — including your phone number and your SMS consent — is never shared with third parties or affiliates for marketing or promotional purposes. No mobile information is sold, rented, or disclosed for anyone else's advertising, under any circumstances.

We use your mobile number only to send you: login and verification codes, alerts about your own account (such as a finished render or a low prepaid balance), and replies to support requests you started. Message frequency varies — typically fewer than 10 messages per month. Message and data rates may apply.

We disclose your number solely to the telecommunications provider that transmits the messages on our behalf, strictly for delivering them — never for that provider's own marketing. Text-message consent is not shared with any third party for any purpose.

Reply STOP to any message to unsubscribe immediately, or HELP for help. You may also email support@reinforce42.com to be removed. We keep the record of your consent and opt-out after you unsubscribe, because messaging regulations require us to be able to prove when consent was given and withdrawn.

11. Changes & contact

We may update this Policy; the "Last updated" date will change and material changes will be posted here. Contact us at Reinforce42, Carlsbad, California — privacy@reinforce42.com.

This document is a template provided for convenience and is not legal advice. Have a licensed attorney review it before you rely on it.