Privacy Policy

• Account data: your name, email address and profile picture from your Google account when you sign in, and the workspaces and teammates you set up.
• Billing data: your purchase history and credit balance. Card details are collected by our payment provider and never reach us.
• Usage data: for each API request, metadata such as the time, model, API key, token counts, cost and status. We use it for billing, usage dashboards, spend limits and abuse prevention.
• Request content: the prompts you send and the outputs returned pass through the Service so they can be delivered to the model provider and back to you. We do not use them to train models, sell them, or use them for advertising.
• Provider keys: if you bring your own provider API keys, we store them encrypted and use them only to send your requests.
• Website analytics: this website uses Plausible Analytics, which does not use cookies and does not collect personal data.

We use personal data to provide and secure the Service, bill you, provide support, send service and billing emails, prevent fraud and abuse, and meet legal obligations. Our legal bases are performance of our contract with you, our legitimate interest in running a secure service, and compliance with law.

We share data only with service providers that help us run the Service:

• Model providers you choose (for example OpenAI, Anthropic or Google), which receive your request content to generate a response under their own terms and privacy policies;
• Our payment provider, for payments, receipts and tax;
• Clerk, for sign-in;
• Google, as the sign-in identity provider;
• our hosting and infrastructure providers.

We do not sell personal data. We may disclose data if required by law.

We keep account and usage data while your account is open. Billing records are kept for as long as tax and accounting law requires. When you close your account, we delete or anonymize your other personal data within 30 days.

Our providers may process data outside your country, including in the United States. Where required, transfers are protected by safeguards such as the EU Standard Contractual Clauses.

Depending on where you live, you can ask to access, correct, delete or export your personal data, or object to or restrict how we use it. Email [email protected] and we will respond within 30 days. You can also complain to your local data protection authority.

We protect data with encryption in transit, encrypted storage of provider keys and credentials, and access controls. No system is perfectly secure, so please tell us at [email protected] if you find a vulnerability.

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

We will post any changes on this page and update the date above. If a change is material, we will also tell you by email.

Email: [email protected].