Privacy Policy
What we collect, what we deliberately do not, and why.
Last updated: 2026-07-30
We do not store your prompts or model output
This belongs at the top, because it is the question worth asking of any API gateway.
The content of the messages you send, and the content the model returns, are never written to our database and never appear in our logs. Requests pass through the gateway to the upstream provider, and responses stream straight back to you.
What we keep for each request is metadata: which model was used, how many input / output / cached tokens, the upstream cost, the amount charged, latency, status and error code. Billing and usage reporting need those numbers, and none of them contain your content.
Server access logs use nginx's default format, which records the request line, referer and user-agent — not request headers, so your API key never appears in plaintext in a log file.
Upstream providers do see your content. Your request has to reach OpenAI, Anthropic, Google or whichever upstream serves it in order to be answered, so their handling of it is governed by their privacy policies. That is structural to any API gateway rather than a choice we made.
What we collect
| Data | Purpose |
|---|---|
| Email address | Account identity and sign-in codes |
| A digest of each API key | Authenticating requests. We do not keep the key itself — keys are stored as HMAC-SHA256 under a server-side pepper, so a lost key cannot be recovered, only replaced |
| Usage metadata | Billing, usage reporting and fault diagnosis (fields as above) |
| Credit ledger | A record of every top-up and every deduction |
Payment data
We never see your card details. Payments are handled by Lemon Squeezy, which acts as merchant of record. What reaches us is an order identifier and which pack was bought, used to post credit to your account.
Retention
Usage and ledger records are retained because they are accounting records. When an account is deleted, those records are dissociated from your identity.
Cookies
We use only the technical storage needed to keep you signed in. No advertising trackers and no third-party analytics.
Your rights
You may request access to, correction of, or deletion of your personal data. Email [email protected].
Where data lives
The service and its database are hosted on Google Cloud Platform in the asia-east1 (Taiwan) region.