Privacy Policy
Last updated: 2026-07-24 · Version 1
1. What we collect
Account data (email, name, hashed password or OAuth identity), organization and billing records (top-ups, ledger entries, invoices), and request metadata (timestamps, model, token counts, latency, API key used, IP address). Request and response contentis proxied to the upstream model provider you select and is not used to train models.
2. How we use it
To operate the Service: authentication, metering and billing, abuse and fraud prevention, rate limiting, support, and legally required record-keeping. We send transactional email (verification, receipts, balance alerts); we do not sell personal data or send third-party marketing.
3. Processors
We use infrastructure and payment processors to run the Service — hosting providers, a managed database, an email delivery provider, and a merchant-of-record payment provider that processes your payment details (we never store full card numbers). Your API requests are forwarded to the upstream model provider addressed by your request.
4. Retention
Financial records are retained as required for tax and accounting. Request metadata is retained for a limited operating window and then aggregated or deleted. When you delete your account, personal data is removed after a 30-day recovery window, except records we must keep by law.
5. Your rights
You can export your data and delete your account from the console. Depending on your jurisdiction you may have additional rights (access, correction, erasure, portability); contact us to exercise them.