Legal review required

Privacy policy

This product-ready draft describes the current implementation. Have it reviewed before launch.

What we store

Anonymous limits use a daily rotating one-way HMAC identifier. Raw IP addresses are not retained. Signed-in accounts store GitHub numeric ID, login, optional avatar, timestamps, keys as hashes, and entitlement data.

Early tester applications

Applicants who sign in may provide tool, workflow, operating-system, feedback-readiness, and optional email details so the team can review preview access. Waitlist applications and reviewer events are not public, reviewer notes are staff-only, and waitlist records are removed with account deletion.

What we do not store

GitHub OAuth access tokens are discarded after identity and sponsorship lookup. API keys cannot be recovered. Prompt and completion content is not retained by default.

Operational data

Metadata such as route, status, and latency is retained for up to 30 days for operations. Aggregate daily service counts may remain longer. Users can revoke keys and delete their account.

Deletion

Account deletion removes personal records, credentials, sessions, sponsorship entitlements, waitlist applications, and linked operational records. Non-identifying aggregate service metrics may remain.