Endstation

Legal

Privacy Policy

Effective date: April 13, 2026

This Privacy Policy describes how Endstation LLC ("Endstation," "we," "us") collects, uses, and shares information when you visit endstation.ai or use our AI Workbench at chat.endstation.ai (together, the "Services"). We wrote this document to be read by humans rather than lawyers. If anything is unclear, email info@endstation.ai.

1. Who this applies to

This policy applies to visitors to our marketing site, trial users of the AI Workbench, and participants in Endstation-led training sessions. It does not apply to services we build for clients under separate engagement agreements, which are governed by those contracts.

2. What we collect

From visitors to endstation.ai (marketing site)

  • Google Analytics page views, device/browser metadata, referrer, and aggregate usage data (via gtag.js). This data is subject to Google's privacy policy.
  • Any information you voluntarily provide, for example via the consultation booking form or by emailing us.

From AI Workbench users

  • Your Google account email, display name, and Google account ID when you sign in. We use this solely to identify your account.
  • A trial message counter (an integer tracking how many trial messages you've sent).
  • A session cookie that keeps you signed in.

From training session participants

  • A display name you choose when joining a session.
  • A session-scoped authentication token (stored as a cookie).
  • Aggregate token usage counts (numerical only).

What we do not collect or store

  • Chat content. Prompts, completions, attached files, and conversation history are not written to our database. Once a response is streamed to you, we don't keep a copy.
  • Web search queries submitted through the Workbench's web-search tool.
  • Any special category data. The Workbench is not designed for and must not be used to submit Protected Health Information (PHI), payment card data, biometric data, or other regulated categories.

3. Third parties that process your data

To provide the Workbench, we pass your requests through third-party services. Those services see the content of your prompts and the files you upload, subject to their own privacy policies and retention terms. The key third parties are:

  • Google (OAuth & Fonts): provides sign-in identity on our Services and hosts the typeface used on our sites. Subject to Google's Privacy Policy.
  • OpenRouter (openrouter.ai) routes your chat prompts to the underlying model provider you select. OpenRouter and the downstream provider (for example, Anthropic, OpenAI, Google, or xAI) process your prompts and responses subject to their own terms. We encourage you to read them.
  • Serper (serper.dev) performs web searches when the Workbench's web search tool is enabled. Your search query is sent to Serper.
  • Fly.io: our hosting provider. Receives request metadata (IP address, timestamps) as part of normal HTTP processing and application logs.
  • Google Analytics (marketing site only): aggregates site traffic on endstation.ai. Not used on the Workbench.

We do not sell your information to data brokers, advertisers, or anyone else. We do not use your data to train any AI models of our own.

4. How we use your information

  • To sign you in and keep you signed in.
  • To enforce the free trial limit.
  • To operate the Workbench by forwarding your prompts to the model provider you selected.
  • To respond to emails and support requests you send us.
  • To measure aggregate traffic on endstation.ai.

5. Cookies and similar technologies

  • chatbot.sid: a session cookie that identifies your sign-in state on the Workbench. Strictly necessary.
  • student_token: a cookie used during training sessions to identify workshop participants.
  • Google Analytics cookies on endstation.ai (_ga, _gid, and similar) for aggregate traffic measurement.

You can block or delete these cookies in your browser settings. The Workbench will not function if you block its session cookie.

6. Retention

  • Account records (email, name, Google ID, trial counter): retained while your account exists. We will delete your account record on request, typically within 30 days.
  • Training session records: retained for the length of the session plus up to one year for internal bookkeeping.
  • Chat content: not retained (see Section 2).
  • Google Analytics data: subject to Google's configured retention for our property.

7. Your rights

You have the right to:

  • Ask what data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to delete your account and associated records.
  • Opt out of marketing communications (we don't currently run marketing campaigns, but this right applies if we start).

To exercise any of these rights, email info@endstation.ai. If you are in the European Economic Area, the United Kingdom, or California, additional rights may apply under the GDPR, UK GDPR, or CCPA; contact us and we will honor them.

8. Security

We use reasonable administrative, technical, and physical safeguards: encrypted connections (HTTPS), access controls, and hosting on reputable infrastructure. No system is perfectly secure, and we make no promise that our safeguards are impenetrable. If a breach affects your data, we will notify you as required by law.

9. Age requirement

The Services are not intended for anyone under 18. Do not use the Services or provide us with any information if you are under 18. If we learn that we have collected data from someone under 18, we will delete it.

10. Changes

If we change this Privacy Policy materially, we will update the effective date at the top and, where appropriate, notify users by email or through an in-product notice. Continued use of the Services after a change constitutes acceptance of the updated policy.

11. Contact

Questions about this policy or how we handle your data?
Email info@endstation.ai.

Endstation LLC
Cleveland Heights, OH