In effect since 2026-10-12.
In effect since 2026-10-12.
Version: 2026-10-12. Effective date: 2026-10-12. Operator: H2O.ai, Inc., 800 W. El Camino Real, Suite 270, Mountain View, CA 94040, USA.
We keep no content you send us. The H2O-Lightning API gateway handles each request in memory, returns the result, and then discards the request and the response: prompts, inputs, images, image links, outputs and probabilities. We do not train on them, write them to logs or pass them to third parties. We do keep traffic metadata about each request, described below, to run, secure and bill the service.
This policy covers the hosted H2O-Lightning API gateway, including the decisions endpoints (/v1/decisions and /v1/systemone) and the chat completions endpoint. It does not cover other H2O.ai products or websites, which have their own policies.
When you call the API, your request travels to our gateway and the selected H2O-Lightning model. The request body, any attached content, and the model's response exist only in working memory while the request is being served. Once the response has been sent, or the request fails or is cancelled, that content is released and is not kept anywhere.
To accept a request, the gateway checks the API key you present against its configuration and applies any rate limits set for that key. These checks read configuration; they do not record what you sent.
We do not store prompt content, response content, images, image links, probabilities, attachments or conversation history, and we do not keep request or response bodies in logs, traces, error reports or caches. An image link in a request is fetched only to answer that request; the image is held in memory and discarded with the request.
We do keep traffic metadata for each request: request timestamp; API key identifier and team identifier; model and decision profile; endpoint called; response status and error class; latency; input and output token counts and number of questions; number and size of images (not the images or their links); client IP address. We keep it for as long as necessary to operate, secure and bill the service, for operating the service and fixing faults; securing the service and preventing abuse; billing and capacity planning; meeting legal obligations. It contains no request or response content and is never used for training.
The gateway relies on configuration that H2O.ai manages: issued API keys, the rate limits attached to them, and a registry of the models the gateway can serve. This configuration is needed to run the service. It is not created from your requests and does not contain your request content.
Nothing you send through the API, and nothing the models return to you, is used to train, fine-tune, evaluate, or otherwise improve any model, whether ours or anyone else's.
No third-party subprocessor receives your request content or responses. The H2O-Lightning models are served by H2O.ai; requests are not forwarded to outside model providers.
Traffic metadata only, never request content or responses, is sent to: PostHog (product analytics (metadata only), region US). This list is generated from the service's configuration and changes with it.
We do not sell, rent, or share request content with anyone, because we do not hold it.
Connections to the API are encrypted in transit. API keys are treated as secrets and access to gateway configuration is limited to authorized H2O.ai staff. Because request content is never written to storage, there is no stored copy of it to be exposed. No system is perfectly secure, and you are responsible for keeping your API keys confidential.
If a court, regulator, or law-enforcement agency asks us for request content, we will tell them we have none to give, because none is kept. We will respond to valid legal process only as the law requires and, where permitted, will let affected customers know.
Depending on where you live, you may have rights to access, correct, delete or object to the processing of personal data. We hold no request content. Traffic metadata linked to your API key, including client IP addresses, can be requested or erased by contacting privacy@h2o.ai, subject to the security, billing and legal reasons for which we keep it.
We will publish any change as a new version with a new effective date. If a change would let us keep or use more of your data than this version allows, we will give advance notice of at least 30 days before it takes effect, and it will apply only to requests made after that date.
Privacy questions: privacy@h2o.ai. Postal address: H2O.ai, Inc., 800 W. El Camino Real, Suite 270, Mountain View, CA 94040, USA.