Trust & transparency

Privacy policy

A clear account of what our platform stores and what its service providers process.

Draft for legal and operational review. This document must be finalized for the operator and deployment jurisdiction before commercial launch.

Application content

Our application does not store your prompts, model responses, or tool-call payloads. Content passes through memory to provide inference. Conversation history in the Playground remains in your browser tab’s memory unless you copy it.

Account and usage information

Key accounts require no email or password; their generated sign-in key is shown once and cannot be recovered. Email signup requires no name. Email accounts store the email address and any display name you choose in Settings. Optional Google/GitHub sign-in stores the verified email and provider account identifier; provider profile names, pictures and access tokens are not retained. We store protected authentication credentials, cryptographic API-key hashes, session records, and content-free usage metadata such as model identifiers, token counts, timing, status, and charges. Financial records document deposits and ledger movements.

Service providers

Cloudflare processes traffic and hosts Workers, D1, and Durable Objects. If you choose Google or GitHub sign-in, that provider processes the login under its own terms and privacy policy. OxaPay processes crypto payment details. The configured inference provider receives your prompts and generates responses; it may independently retain content and metadata under its own policy. This platform does not claim provider-side zero retention or anonymity. Resend processes your email address and account action links to deliver verification and password-reset emails. Cloudflare forwards incoming mail to the operator.

Your choices

You can revoke keys, revoke sessions, and request account deletion from Settings. Retained financial records may be required for accounting, dispute resolution, or applicable law. Do not send content you are not permitted to share with the inference provider.

Before launch

The operator must publish its legal identity, contact channel, actual retention periods, lawful processing basis, jurisdictional rights, and provider agreements before commercial launch.

Draft updated October 25, 2026.