LLMs.txt Generator
Privacy Policy
Effective 18 September 2026 · Last updated 18 September 2026
1. Who we are
This policy explains how Garvit Malhan, an individual trading as txtllms.com, handles personal data collected through txtllms.com (the "Site") and the LLMs.txt Generator service offered on it.
Garvit Malhan is the data controller for that information.
- Contact: [email protected]
2. What we collect
Information you give us
| Where | What |
|---|---|
| Generator form | Your email address and the website domain you ask us to
generate an llms.txt file for. Both are sent to our /api/generate
endpoint when you submit the form. |
| Newsletter form | Your email address, sent to our /api/subscribe endpoint. |
| Direct contact | Anything you choose to include when you email us or book a call. |
Information collected automatically
When you load a page we and our analytics provider receive standard technical data: IP address, browser and device type, operating system, referring page, the pages you view and when, and approximate location derived from your IP. See Cookies and analytics.
Information about the domains you submit
To generate an llms.txt file we read the domain's public robots.txt and
its XML sitemaps, and collect up to 250 page URLs from them. That list of URLs is then sent to
Google's Gemini API, which writes the file. We do not attempt to access anything
behind a login, and we do not collect personal data from those pages beyond what is needed to
produce the file. Only submit a domain you own or are authorised to act for.
3. Why we use it
Under the UK and EU GDPR we must have a lawful basis for each use. Ours are:
| Purpose | Lawful basis |
|---|---|
Generating your llms.txt file and returning it to you | Performance of a contract, or steps taken at your request before entering one |
| Sending the newsletter you signed up for | Consent, withdrawable at any time |
| Replying to your enquiries | Legitimate interests - responding to people who contact us |
| Measuring how the Site is used, and keeping it secure and working | Consent for non-essential analytics cookies; legitimate interests for security and abuse prevention |
| Meeting legal or accounting obligations | Legal obligation |
We do not sell your personal data, and we do not share it with third parties for their own marketing.
A note on the generator form. Entering your email is required to use the generator. We use it to deliver your file and to contact you about that request. If we also want to add you to the newsletter from that form, we will ask you separately - submitting the generator form is not itself consent to marketing.
4. Cookies and analytics
We use three analytics tools. None of them is strictly necessary to make the Site work, so none of them loads until you accept analytics cookies. Until then, no analytics cookie or identifier is set.
| Tool | Provider | What it does |
|---|---|---|
Google Analytics 4G-XZVZG1427H |
Google LLC | Sets cookies to tell repeat visits apart and reports on how pages are used. We enable IP anonymisation. |
| Mixpanel | Mixpanel, Inc. | Records product events - for example that the generator form was submitted - so we can see which features are used. We disable IP collection. |
| Vercel Analytics | Vercel Inc. | Aggregate page-view and performance measurement for the Site. |
Where the law requires it, we ask for your consent before these are set, and you can change or withdraw that choice at any time via the link in the footer. Essential cookies needed to make the Site work are always set.
Google's handling of this data is described in Google's Privacy Policy. You can opt out of Google Analytics across all sites using Google's browser add-on.
Content loaded from other services
Some pages load fonts, images or widgets from third parties. Doing so reveals your IP address and browser details to them, and they may set their own cookies. These are:
- Google Fonts - typefaces used across the Site.
- Calendly - if you follow the link to book a consultation.
- LinkedIn - profile links and images.
- Other image hosts - some illustrative images on the Site are loaded from external hosts.
5. Who we share it with
We share personal data only with providers who process it on our behalf, under contract:
| Provider | What for |
|---|---|
| Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA) | Hosting the Site, the API endpoints and the database |
| Google LLC (Gmail SMTP) | Storing newsletter sign-ups and sending email |
| Google LLC (Gemini API) | Generating the content of your llms.txt file from the URL list |
| Google LLC (Analytics) | Usage measurement |
| Mixpanel, Inc. | Product event measurement |
| Vercel Inc. (Analytics) | Aggregate page-view and performance measurement |
We may also disclose data where we are legally required to, or to establish or defend legal claims. If the service is ever transferred to another operator, we will tell you before your data moves.
6. International transfers
Some of the providers above operate outside India, including in the United States. Where personal data is transferred outside the UK or EEA, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses, together with additional safeguards where needed. You can request details of the safeguards that apply by writing to us.
7. How long we keep it
| Data | Kept for |
|---|---|
| Generator submissions (email and domain) | 12 months from your request |
| Newsletter sign-ups | Until you unsubscribe, then up to 24 months on a suppression list to honour the opt-out |
| Correspondence | 24 months from our last exchange |
| Analytics data | 14 months - matching the retention set in Google Analytics; Mixpanel and Vercel Analytics follow their own default periods |
We delete or anonymise personal data once it is no longer needed for the purpose it was collected for.
8. Your rights
If you are in the UK or EEA, you have the right to access your data, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time without affecting processing already carried out.
To exercise any of these, email [email protected]. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
Every newsletter includes an unsubscribe link, which takes effect immediately.
If you think we have handled your data badly, you may complain to your data protection authority. In the UK that is the Information Commissioner's Office; in the EEA it is the supervisory authority where you live. We would rather you raised it with us first so we can put it right.
California residents
If you live in California, you may request disclosure of the categories and specific pieces of personal information we have collected, ask us to delete it, and ask us to correct it. We do not sell or share personal information as those terms are used in the CCPA/CPRA, and we will not discriminate against you for exercising these rights. Use the same contact address above.
9. Security
The Site is served over HTTPS and access to stored data is restricted to those who need it. No system is perfectly secure, so we cannot guarantee absolute security, but we take reasonable technical and organisational measures to protect your data, and we will notify you and the relevant authority of a breach where the law requires.
10. Children
This service is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the service changes. The "last updated" date at the top always reflects the current version. If a change materially affects how we use your data, we will give notice on the Site and, where we hold your email for that purpose, by email.
12. Contact us
Questions about this policy, or about your data:
- Email: [email protected]
This policy is governed by the laws of India.