Tasco Inference

Privacy Policy

Effective 22 October 2026

Summary

• We do not store or log prompts or outputs. They exist only in memory while your request is being answered.
• We never use prompts or outputs to train or improve models.
• For each request we keep a usage record with token counts and timings, and no content, IP address or user identifier.
• Inference runs on GPUs rented from third-party cloud providers, and traffic passes through Cloudflare. Both are described below.

Who we are

Tasco Inference is operated by Fulvio Luca Daniele Ventura, VAT IT01772860852, Via Lorenzo Perosi 25, 93100 Caltanissetta, Italy ("we"). We are the data controller for the processing described here. Contact: privacy@tascoinference.com.

Scope

This policy covers the inference API at api.tascoinference.com, whether reached directly or through a platform such as OpenRouter, and this website. When you use us through a platform, that platform's own policy also applies to what it handles.

Prompts and outputs

To answer a request we receive the request body (messages, parameters, tool definitions) and generate a response. This content:

• is held in memory on our gateway and on the GPU server only for the duration of the request;
• may remain for a short time in the GPU's prefix cache, an in-memory cache that lets later requests sharing the same prefix start faster; it is overwritten in normal operation and is never written to disk;
• is never written to logs, databases or files by us;
• is never used to train, fine-tune or evaluate models.

Usage records

For each request that reaches a model we keep one record, used for invoicing, capacity management and service quality:

request id and time	an identifier we generate, and the timestamp
model	the model requested
token counts	prompt tokens, cached prompt tokens, output tokens
timing	time to first token, total duration
outcome	HTTP status, finish reason, and whether the request completed, was interrupted or was declined for capacity

Usage records contain no prompt or output text, no request headers, no IP address and no end-user identifier (the user field is not stored). We keep them for as long as Italian accounting law requires us to keep the records behind our invoices (currently ten years).

Who else can see traffic

• Cloudflare, Inc. runs our gateway and terminates the encrypted connection, so traffic is decrypted inside Cloudflare's network before it is passed on to the GPU server over another encrypted connection. Cloudflare acts as our processor. We have turned off request logging in our gateway.
• GPU cloud providers. We rent GPU servers from third-party marketplaces (currently Vast.ai). The operator of the physical machine has control over its hardware and we cannot technically exclude that they could access its memory. We do not give them any content, and the model server is reachable only through an encrypted tunnel from our gateway.

We do not sell data and we do not share it with anyone else, except where the law requires us to.

Where processing happens

GPU servers are located in the data center regions declared for each endpoint (for OpenRouter, on the provider page of each model). The gateway runs on Cloudflare's global network. Processing may therefore take place outside the European Economic Area, in particular in the United States and Canada. Where the GDPR applies, such transfers rely on the safeguards offered by our providers, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

Legal basis

• Answering API requests: performance of the contract with our customer (GDPR Art. 6(1)(b)).
• Usage records for invoicing: legal obligation (Art. 6(1)(c)) and contract performance.
• Protecting the service from abuse: legitimate interest (Art. 6(1)(f)).

This website

This website sets no cookies and uses no analytics or tracking. Cloudflare processes the technical data needed to deliver pages, such as IP addresses, as our processor. If you write to us by email, we keep the correspondence as long as needed to handle your request.

Your rights

Where the GDPR applies, you can ask us for access to, correction or erasure of personal data about you, restriction of or objection to its processing, and data portability. Write to privacy@tascoinference.com. You also have the right to lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (garanteprivacy.it).

Changes

We will publish any change to this policy on this page with a new effective date. A change that reduces your protection will never apply to content processed before it takes effect.