What we store
- Your email, optional name, and a salted scrypt hash of your password (never the password itself).
- A hash of each API key. The full key is shown to you once and never stored.
- Per request: model, token counts, cost, duration, status and the key used.
- Payments: amount, method, status and the provider reference. For M-Pesa, the phone number you entered.
- Messages you send through the contact form.
- Conversations you have in the dashboard playground, so you can reopen them later. Only you can see them, and you can delete one or all of them from the playground at any time.
- A log of the account emails we send you (subject, type and delivery status).
What we do not store
The content of prompts and replies sent with an API key, for example from Cursor. They pass through our servers to the model provider and back, and are not written to our database or logs.
Who processes your data
- Model inference providers, which receive the prompts you send in order to answer them.
- PayPal and PayHero (M-Pesa), which process payments under their own privacy policies. We never see your card number.
- Neon (database), Vercel (hosting) and Resend (account emails).
We do not sell your data and we do not use it for advertising.
Cookies
One essential cookie keeps you logged in. There are no tracking or advertising cookies.
Security
Traffic is encrypted with HTTPS. Passwords and keys are stored only as hashes, logins are rate limited, and admin actions are recorded in an audit log.
Your choices
You can revoke keys and change your password at any time. To delete your account and its data, contact us from your account email. Payment records may be kept as long as tax law requires.