Data & privacy
What happens to your data
A plain description of how this service handles data. The operator of a deployment should extend it with their legal entity, contact details and jurisdiction-specific terms before accepting customers.
What we store
- Your account (name, email, a salted password hash) and your sessions.
- Your conversations and their messages, so that you can come back to them. They are stored in this service’s database and are visible only to your account.
- A usage record for every request: model, token counts, cost, latency, status and timestamps. Usage records contain no prompt or response text.
- An append-only credit ledger and your payment receipts. Card details are entered on the payment provider’s hosted page and never reach our servers.
- API keys as a keyed hash. The key itself is shown once and not kept.
What is sent to model providers
- To answer a message, the conversation so far is sent to the provider of the model you selected — for example Anthropic or OpenAI — using this service’s own provider credentials.
- That provider processes the content under its own terms and retention policy. We do not control, and make no promise about, how long a provider retains request data. We do not claim zero data retention.
- API requests are forwarded the same way. The user and metadata fields are not forwarded.
Deleting data
- Deleting a conversation permanently removes it and all of its messages from our database.
- Usage records, ledger entries and payment receipts are kept because they are financial records; they hold no conversation text.
- Deleting data here does not delete anything a provider may have retained, because we cannot enforce that.
What we log
- Application logs record request ids, error codes and timings. They do not record prompts, responses, API secrets or payment secrets.