Privacy

We store your email address, a password hash, hashed session and API tokens, encrypted provider credentials, and request metadata: provider, model, token counts, latency, status and time. We do not store or log prompts or completions.

Requests pass to providers you connect, subject to their privacy and retention policies. Session cookies are necessary for sign-in. We use no third-party analytics or CDNs.

Disconnecting removes stored provider credentials. Revoke delegated keys in the provider dashboard to invalidate them there too. Ask the service operator for account deletion. Operational backups may retain encrypted data until their retention period ends.