Privacy Policy

1. Summary

We collect the minimum needed to run a metered API: your account details, your keys, and per-request metadata such as model, token counts, latency, status and cost. We do not sell your personal data.

2. What we collect

• Account data — email address, display name, hashed password, role and account status.
• Session data — a session token stored as a hash, plus IP address and user-agent for security and audit purposes.
• API keys — key prefix and hash only. The full key is shown once at creation and never stored.
• Request metadata — timestamp, model, provider, routing decision, token counts, latency, HTTP status, error code and cost.
• Billing data — wallet ledger entries, payment records, invoice numbers and gateway identifiers. We never store full card numbers.
• Audit log — security-relevant actions such as sign-in, key creation, key rotation and administrative changes.

3. Prompt and completion content

By default we do not persist the content of your prompts or model responses. We store metadata about the request — token counts, model, provider, latency, status and cost — because that is what metering, billing, rate limiting and your own activity log require.

If a feature you enable requires storing content (for example saving a conversation in the playground), it is stored for your account only and can be deleted by you. Content sent to an upstream provider is governed by that provider's retention policy, which we surface on the providers page.

4. Why we use it

• To authenticate you and keep your account secure.
• To route requests, enforce plan limits and queue priority.
• To meter usage and bill your wallet accurately.
• To show you activity, usage and cost analytics in your dashboard.
• To detect abuse, fraud and attacks, and to meet legal obligations.
• To provide support when you contact us.

5. Sharing

We share data only where necessary:

• Upstream providers — the prompt you send is transmitted to the provider serving your request. We do not send your account identity.
• Payment gateways — to process top-ups and issue invoices.
• Infrastructure providers — hosting and database services under contract.
• Legal — where required by law or to protect rights and safety.

We do not sell personal data, and we do not share it for third-party advertising.

6. Retention

• Account data is kept while your account is open, then deleted or anonymised within 30 days of closure.
• Request metadata is retained for up to 12 months so you can review long-run usage.
• Wallet ledger and payment records are kept for as long as tax and accounting law requires.
• Audit and security logs are retained for up to 12 months.

7. Security

Passwords and session tokens are hashed, provider credentials are encrypted at rest, and all traffic is served over TLS. Access to production data is restricted. See the security page for more detail.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. You can update your name and password from Settings, and request an export or deletion by emailing us. We will respond within the period required by applicable law.

9. Cookies

We use a single first-party session cookie to keep you signed in. It is required for the dashboard and the playground to work and is not used for advertising or cross-site tracking.

10. Children

The service is not directed at children, and we do not knowingly collect data from anyone under 18.

11. Contact

Privacy questions and data requests can be sent to privacy@prorouter.com.