Privacy

Ballast is a marketplace for GPU compute. Renters send prompts to an OpenAI-compatible API, and hosts run those prompts on their own GPUs. This page says what that means for your data.

Who sees your prompts

Your prompts and the model's replies are processed on a community host: a person's own computer, not a Ballast data center. That host can technically read them. Do not send secrets, personal data about other people or anything you would not hand to a stranger. The key-creation screen asks you to confirm this before you get a key.

Hosts never see who sent a prompt. They see no account, email or key. Renters never see which host ran a job.

What Ballast keeps and what it deletes

• Prompt and reply text is held only while a job runs. The request body is erased the moment the job ends, and streamed reply chunks are deleted within about a minute.
• After a job we keep only the model, token counts, price, which host ran it, timing and status. We use these to bill you, pay hosts, show your usage and spot bad hosts.
• Host spot-checks use fixed test prompts that Ballast writes, never renter prompts.

What we collect about you

• Sign-in: your email address, and the display name and picture from Google or GitHub if you use them. Sign-in is by Google, GitHub or an emailed link or code. Ballast has no passwords.
• Sessions: when and from which browser you signed in, so you can see and end active sessions on your account page.
• Renters: API keys (stored only as a hash and the last four characters), your credit balance and purchase history, and your job history without prompt text.
• Hosts: each device's GPU name, memory, driver, status, reliability score and the models it has loaded; your earnings and test payouts. When you approve a device we show the country of the address that asked to link it.
• Support: the email and message you send through the support form.

Who else handles data

• Supabase stores accounts and product data, and sends sign-in emails through Resend.
• Stripe handles card payments. Ballast never sees your card number. Payments currently run in Stripe test mode: no real charge is made.
• Vercel hosts the website and API.
• Google and GitHub are used only if you choose them to sign in.

We do not sell your data and we do not run ad trackers.

Money and test mode

Credits are bought in Stripe test mode, so no real money moves. Host payouts are a labelled test ledger: a payout request is recorded, and no money is sent. Every screen that shows earnings or payouts says so.

Deleting your data

You can delete your account at any time from your account. Your profile, API keys, devices and device tokens are removed and your host agents stop within one poll. Accounting rows such as credit and earnings entries are kept without your identity, because a ledger must stay whole.

How account deletion works

Questions

Use the support form.