Privacy Policy

Last updated: 07/11/2026

1. What we collect

Email, hashed password, interface language and sign-in times. For the API we store token counts, model, cost and status code of each request — required for billing and reconciliation.

2. How passwords are stored

Passwords are hashed with bcrypt, salted per user. We do not store and cannot read the original password. API keys are stored only as SHA-256 hashes — the original key is shown exactly once at creation.

3. Third-party sharing

We do not sell user data. Data is shared with infrastructure providers (hosting, payments, transactional email) only to the minimum extent needed to operate, and with authorities upon a lawful written request.

4. Your rights

You may request access to, correction of, or deletion of your personal data at any time via the contact page. Deletion ends all active API keys; issued invoices and ledger entries are retained under accounting obligations.