Privacy Policy

Information we collect

• Account information. Your email address, and — if you sign in with Google — your basic Google profile (name, email, avatar). Authentication is handled by Supabase.
• Payment information. Subscription and card details are collected and processed by Stripe. We never receive or store your full card number; we store only a Stripe customer reference and your subscription status.
• API usage metadata. For each request we record metadata needed for billing and abuse prevention: timestamp, the model used, token counts, and your API key identifier.
• Technical data. Limited network and security logs (e.g., IP address) processed by our infrastructure providers to operate and protect the service.

What we do not store

We do not retain the content of your inference requests or the model’s responses (your prompts and completions) in our systems. Our gateway meters token usage for billing without persisting message content.

How we use data

• To provide, maintain, and secure the API and your account.
• To meter usage, apply your token balance, and process billing.
• To prevent fraud, abuse, and violations of our Terms.
• To respond to support requests and required legal obligations.

Service providers

We share the minimum data necessary with providers that help us run the service: Stripe (payments), Supabase (auth and database), Cloudflare (network and DDoS protection), and our hosting providers. We do not sell your personal information.

Data retention

We keep account and billing records for as long as your account is active and as required for legal, accounting, and fraud-prevention purposes. Usage metadata is retained to support billing and security. You may request deletion of your account at any time.

Your choices

You may access, correct, or delete your account information, and revoke or regenerate your API key from your dashboard. To request deletion of your account and associated data, contact us at the email below.

Security

API keys are stored only as salted hashes and shown once at creation. Traffic to the API is encrypted in transit. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.

Children

The service is not directed to individuals under 18, and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Contact

Questions or requests? Email support.modelrouters@gmail.com.