Privacy

1Request content and generated media

• Request and response content is not logged. Generated media -- images, audio and video from the API, and media generated in the dashboard -- is stored on our servers and served from our website, then permanently deleted 14 days after it is generated.
• Save a copy before the 14-day period ends if you want to keep it. Media links are unlisted; anyone with a link can access it until it expires.
• No third-party scripts, trackers or analytics. We use first-party cookies to attribute signups to marketing links.

2Cookies

• A first-party cookie tracks which marketing link brought you to the site. The cookie stores a visitor id that maps to the source code in the link; it expires after 90 days.
• The cookie name is __Secure-rl.src in production and rl.src in local development. It is httpOnly and cannot be read by JavaScript.

3What we keep about requests

Requests leave usage metadata. Generated media is retained separately for the limited period described above.

• What is kept, per table: usage metadata (time, model id, key id, token counts, cost, request id, upstream name, latency and status) indefinitely; resource ids for async tasks; payment addresses and transaction ids (txids); the credit ledger, indefinitely.
• Upstream response field names may be logged for task diagnostics; their values are not.

4Your login

• The web login database, separately: email, display name, password hash, two-factor secret and recovery codes, and each session's IP address and user agent, kept until that session is revoked or the account is deleted.
• Conversation text in the dashboard chat lives in your browser. Generated media is temporarily stored on our servers for 14 days and permanently deleted afterwards.

5Support tickets

• Support tickets and their messages are stored on our servers and visible to the operator. A closed ticket and all its messages are permanently deleted 14 days after it is closed.

6What the operator sees

• Key names reach operator logs and metrics; account names reach operator logs. Metrics identify accounts by id only.
• The upstream gateway sees the request body and the model id, never your account, key or address.

7Deletion

• Deleting your account revokes every key, cancels pending top-ups, tombstones your email and revokes every session. The usage and credit ledgers are retained.
• A payment sent to an old deposit address after account deletion is credited to the closed account and forfeited.