Privacy Policy

• Account data: email address, authentication identifiers.
• Usage metadata: model called, token counts, exact cost, request id, and timestamp for every request.
• Billing records: top-up amounts, payment method metadata from our payment processor (we never see or store full card numbers).
• Support communications you send us.

When you make a request, your prompt and any attached content are forwarded to the model provider you selected, to generate a response. We do not store the body of your prompts or model responses. Our billing ledger records only request metadata — which model was called, token counts, exact cost, a request id, and a timestamp — never the prompt or output content itself. This is a deliberate design choice, not an oversight.

The model provider you route to has its own data-handling policy for the content it processes; consult that provider’s policy for how long it retains request content on its side.

Where GDPR applies, we process account and billing data to perform our contract with you (Art. 6(1)(b)), and usage metadata for legitimate interests in billing accuracy, fraud prevention, and service reliability (Art. 6(1)(f)).

We rely on a small number of subprocessors for infrastructure, authentication, payments, email, and the AI model providers you explicitly select. See Subprocessors & data flow for the full list.

We use strictly necessary cookies for authentication (session tokens) and no third-party advertising or tracking cookies on the dashboard or API surfaces.

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact [email protected].

Account data is retained for as long as your account is active, plus a limited period afterward for legal and accounting requirements. Billing and usage-metadata records are retained as required by applicable tax and accounting law.

Our infrastructure and subprocessors may process data outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

Privacy requests: [email protected]. General contact details are on the Contact page.