Home/Data Processing

How Your Data Is Processed

A transparent, technical breakdown of what happens when you make an API call to JuiceFactory — from the moment your request arrives to the moment it is discarded.

JuiceFactory AB is a Swedish company (EU jurisdiction). All processing occurs within the EU/EEA.

Request Lifecycle

Every API request follows the same five-step pipeline. No step persists your prompt or completion to disk.

1

Receive

Your HTTPS request arrives at our API gateway in Stockholm, Sweden. TLS 1.3 terminates at the edge — your payload is encrypted in transit.

2

Authenticate

We validate your API key and check rate limits. No request body content is logged during authentication.

3

Process in memory

Your prompt is forwarded to the inference engine and held exclusively in volatile memory (RAM). It is never written to disk, object storage, or any persistent logging system.

4

Respond

The model completion is streamed back to you over the same TLS connection. For streaming requests, tokens are delivered as server-sent events.

5

Discard

Once the response is fully delivered, the prompt and completion are purged from memory. The only record created is a billing metadata entry (see below).

What We Store

We retain only the minimum billing metadata required to invoice you accurately and meet our accounting obligations under Swedish law (Bokforingslagen). None of these fields contain your prompt or response content.

FieldPurpose
TimestampUTC time the request was processed — required for billing and usage reporting.
Token countInput and output token counts — used to calculate usage-based billing.
Model identifierWhich model was invoked (e.g. claude-sonnet, llama-3) — needed for per-model pricing.
Request IDA random UUID for idempotency and support troubleshooting. Contains no payload data.
HTTP status codeWhether the request succeeded or failed — used for uptime monitoring and SLA reporting.

What We Don't Store

The following data categories are never written to disk, logged, cached, or retained in any form after your API response is delivered. This is guaranteed by our zero-retention architecture and codified in the DPA.

Prompts or system instructions
Model completions or responses
Embeddings or vector representations
Fine-tuning data or training datasets
Conversation history or session context
File uploads or document contents
IP addresses (stripped after rate-limit evaluation)

Data Processing Agreement

Under GDPR Article 28, any entity that processes personal data on behalf of a controller must have a Data Processing Agreement in place. Our DPA covers:

  • Subject matter and duration — inference processing for the term of your subscription.
  • Nature and purpose — stateless LLM inference via API; no secondary use of data.
  • Types of personal data — any data you include in API requests (you control this as the data controller).
  • Sub-processor obligations — full list disclosed, prior written authorization required for changes (Article 28(2)).
  • Breach notification — within 48 hours of confirmed breach, per Article 33 timelines.
  • Data deletion — upon contract termination, all billing metadata is deleted or returned per your instruction.
  • Audit rights — you may audit or appoint an auditor to verify compliance with the DPA.

The DPA is available for download and electronic signature at portal.juicefactory.ai.

Your Rights as Data Controller

As the data controller (GDPR Article 4(7)), you determine the purposes and means of processing personal data sent through our API. Here is how our stateless architecture intersects with data subject rights under GDPR Articles 15–21.

Right of access (Article 15)

No prompt or completion data exists in our systems to disclose. Billing metadata (token counts, timestamps) is available in the portal and does not contain personal data from your requests.

Right to rectification (Article 16)

Since inference data is not retained, there is nothing to rectify on our side. Billing metadata can be corrected upon request.

Right to erasure (Article 17)

Zero-retention means erasure is automatic — data is purged from memory after each response. For billing metadata deletion, contact support or use the portal.

Right to restriction of processing (Article 18)

You can stop sending data at any time by revoking your API key. No historical inference data needs to be restricted because none is stored.

Right to data portability (Article 20)

Billing metadata and usage reports are exportable from the portal in standard formats. No inference content is available because it is never persisted.

Right to object (Article 21)

We process data only to deliver the service you requested — there is no profiling, automated decision-making, or secondary processing to object to.

Our stateless architecture simplifies DSAR responses: because no personal data from inference requests is retained, the primary obligation shifts to confirming this fact to the data subject.

Sub-processors

Per GDPR Article 28(2), we disclose all sub-processors involved in delivering the inference service. Changes to this list require prior written notification to customers with DPAs in place.

EntityRoleLocationLegal basis
JuiceFactory ABInference processing, API gateway, billingStockholm, Sweden (EU)Data processor under GDPR Article 28 DPA
Hetzner Online GmbHCompute infrastructure (dedicated GPU servers)Helsinki, Finland (EU)Sub-processor under GDPR Article 28(2) with prior authorization

All sub-processors are EU/EEA-incorporated entities. No data transfers to third countries occur. Last updated May 2026.

FAQ

Does JuiceFactory train models on my data?

No. Your prompts and completions are never used for model training, fine-tuning, RLHF, or any form of model improvement. This is contractually guaranteed in our Data Processing Agreement (DPA) under GDPR Article 28. We process your data solely to deliver the inference response you requested.

Where is my data physically processed?

All inference runs on dedicated GPU servers located in EU datacenters — specifically in Stockholm (Sweden) and Helsinki (Finland). Data never leaves EU/EEA jurisdiction. There are no US-based sub-processors in our chain, which means CLOUD Act and FISA 702 do not apply to your data.

What happens if I submit personal data in a prompt?

As the data controller (GDPR Article 4(7)), you decide what data to send. Our zero-retention architecture means personal data included in prompts is processed in volatile memory and discarded immediately after the response is delivered. It is never persisted, which significantly reduces risk. However, we recommend you minimize personal data in prompts per GDPR Article 5(1)(c) — the data minimization principle.

How do I exercise data subject rights (DSAR) for inference data?

Because we operate a stateless inference pipeline with zero retention, there is no stored prompt or completion data to retrieve, rectify, or erase. For a DSAR under GDPR Articles 15-21, we confirm that no personal data from inference requests exists in our systems. Billing metadata (token counts, timestamps) does not contain personal data from your prompts.

Can I get a signed Data Processing Agreement?

Yes. A GDPR Article 28-compliant DPA is available for download and electronic signature in the JuiceFactory portal at portal.juicefactory.ai. The DPA covers all processing obligations including sub-processor disclosure, breach notification timelines (Article 33), data deletion, and audit rights.

Ready to process data the right way?

Zero retention. EU-only infrastructure. GDPR Article 28 DPA included. Start building with confidence.