Privacy Policy

Last updated: 9 September 2026

1. Data we collect

• Account data: name, email, hashed password, and authentication sessions.
• Usage data: requests, token counts, cost, latency, model and upstream used, and API key identifiers.
• Payment data: top-up intents, method, amount, status, and crypto deposit addresses or PayPal capture references.

2. How we use it

• To operate and secure the Service, enforce limits, meter usage, and provide support.
• To process payments and comply with legal obligations.
• We do not train models on your content and do not sell your data.

3. What we send to providers

Prompts and outputs are forwarded to the model provider you select (or to the cheapest eligible provider) to fulfil your request. Providers process data under their own policies.

4. Crypto payments

USDT deposits are received at a per-user address derived from our wallet infrastructure. We store the address and the on-chain transaction reference; we do not store private keys in the application database.

5. Retention

Usage records are retained for billing, fraud prevention and legal compliance. You may request deletion of your account, subject to records we must keep.

6. Security

Secrets and provider credentials are stored in the platform's secret manager, never in the database. Access is restricted to administrators and audited.

7. Your rights

You may access, correct or delete your personal data, and object to processing, by contacting us.

8. Contact

Privacy requests: support@aivokey.dev