What we store
- Your email, optional name, and a salted scrypt hash of your password (never the password itself).
- A hash of each API key. The full key is shown to you once and never stored.
- Per request: model, token counts, cost, duration, status and the key used.
- Payments: amount, method, status and the provider reference. For M-Pesa, the phone number you entered.
- Messages you send through the contact form.
What we do not store
The content of your prompts and the models' replies. They pass through our servers to the model provider and back, and are not written to our database or logs.
Who processes your data
- Model inference providers, which receive the prompts you send in order to answer them.
- PayPal and PayHero (M-Pesa), which process payments under their own privacy policies. We never see your card number.
- Neon (database) and Vercel (hosting).
We do not sell your data and we do not use it for advertising.
Cookies
One essential cookie keeps you logged in. There are no tracking or advertising cookies.
Security
Traffic is encrypted with HTTPS. Passwords and keys are stored only as hashes, logins are rate limited, and admin actions are recorded in an audit log.
Your choices
You can revoke keys and change your password at any time. To delete your account and its data, contact us from your account email. Payment records may be kept as long as tax law requires.