Privacy Policy

1 Information We Collect

We collect information you provide directly to us when you create an account, make payments, or contact us for support.

Account information: email address, encrypted password
Usage data: API call logs, token consumption, model usage
Payment information: processed via Stripe/PayPal (we do not store card numbers)
Technical data: IP addresses, browser type, request timestamps

2 How We Use Your Information

We use the information we collect to provide, maintain, and improve our services.

To authenticate you and manage your account
To process payments and send transaction confirmations
To calculate billing and usage statistics
To enforce rate limits and detect abuse
To send service-related notifications (outages, policy changes)
To improve the quality of our routing and inference services

3 Data Storage and Security

Your data is stored on servers located in Singapore and the United States. We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, and strict access controls.

API keys are stored as non-reversible hashed values. Passwords are hashed using BCrypt with a minimum cost factor of 10.

4 Data Sharing

We do not sell your personal data. We share data only in the following limited circumstances:

With upstream AI providers (OpenAI, Anthropic, Google) — only the content of API requests you send
With payment processors (Stripe, PayPal) — only payment-related information
With law enforcement when required by applicable law
With your consent for any other purpose

5 Cookies and Tracking

Our website uses essential cookies for authentication sessions. We do not use third-party advertising cookies or behavioral tracking cookies.

We use privacy-respecting analytics to understand aggregate usage patterns. This data is anonymized and not linked to individual users.

6 Data Retention

We retain account information for as long as your account is active. API consumption logs are retained for 90 days for billing verification purposes, then deleted.

If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

7 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: request a copy of your personal data
Rectification: correct inaccurate data
Erasure: request deletion of your data
Portability: receive your data in a machine-readable format
Restriction: limit how we process your data
Objection: object to certain types of processing

8 Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will delete such information promptly.

9 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or via a prominent notice on our website at least 30 days before the change takes effect.

Your continued use of our services after the effective date of the revised policy constitutes your acceptance of the changes.

Table of Contents