Privacy

Draft. This notice is not a finished privacy policy.

The hosted gateway stores your account email, password hash, workspace membership, and configuration. Provider keys are encrypted. Virtual keys are stored as hashes. Usage rows store token counts, model names, and cost estimates. Request prompts are not written to the usage table.

Optional request metadata can be written to R2 when that feature is turned on for the deployment. Analytics Engine can receive aggregate usage points.

Email messages are sent through the provider configured for the deployment (for example Resend or Cloudflare Email Service). OAuth uses GitHub or Google only when those secrets are set.

You can export workspace data from Settings and delete an account from Account.