Privacy Policy

Account data: When you register, we collect your email address, display name, and hashed password. We never store your password in plain text.

Usage data: Each API request you make is logged with: the model used, token counts, cost, latency, status, the provider's finish reason, timestamps, and a random request ID. If a request fails, the provider's error message (up to 500 characters) is kept so you can see why. This forms your billing audit trail. We do not store the content of your prompts or completions in our usage logs.

Retry cache (only if you use it): If you send an Idempotency-Key header, the response to that request is kept for 24 hours so a retry gets the same answer, then deleted. Requests without the header store no response.

Security records: For sign-ins, failed sign-ins and payments we record the IP address and browser (user agent), and we remember the IP addresses you sign in from for 30 days to alert you about sign-ins from new ones. This protects your account and helps us investigate abuse.

Payment data: Top-up transactions are processed via NOWPayments (crypto). We store payment status and amounts but never your wallet private keys.

API keys: We store a hash of your API key and a short prefix for display. The full key is shown exactly once at creation and not stored again.

We use collected data to:

• Operate the service and calculate your balance
• Generate invoices and send transactional emails (payment receipts, spend alerts)
• Detect abuse and enforce rate limits
• Improve the product using aggregated, anonymised analytics

We do not use your data for advertising, sell it to third parties, or share it with data brokers.

We use a cookieless, privacy-first analytics provider (either Plausible or Umami) to understand how the site is used.

Our analytics setup:

• No cookies — we do not set any cookies for analytics purposes.
• No IP logging — IP addresses are not stored; only country-level data may be inferred by the provider.
• Aggregated only — we see page view counts, referrers, and event counts. Never individual user journeys.
• No PII — events never include your email, user ID, API key, or prompt content.
• No third-party ad networks — analytics data is not shared with advertisers.
• GDPR-friendly — this analytics approach does not require a consent banner under most EU guidance.

Analytics are disabled entirely when the service is not configured with a provider URL — in that case no script is loaded at all.

We use a single httpOnly session cookie for authentication (your refresh token). This cookie:

• Is set with Secure, SameSite=Strict
• Expires after 7 days
• Is not accessible to JavaScript

We also use localStorage in your browser to remember your console settings (model, parameters) and your recent console conversations (the last 20, each message cut to 2,000 characters), so they're there when you come back. This data stays on your device; you can clear it from the console or by clearing your browser's site data.

No third-party tracking cookies are set.

We share data only as necessary to operate the service:

• OpenRouter — your API requests are proxied through OpenRouter to reach AI model providers. OpenRouter's own privacy policy applies to that leg of the request.
• NOWPayments — payment processing. Their privacy policy applies to crypto transactions.
• Analytics provider — aggregated, cookieless usage stats only (see Section 3).
• Error monitoring (Sentry) — technical error reports, with keys, tokens, email addresses and cookies removed and no request bodies (so no prompts).
• Email delivery — our email provider sends transactional emails (verification codes, receipts, security alerts) to your address.
• Backup storage — database backups are encrypted before they leave our server and may be stored with Cloudflare R2.
• Model providers — for some models we can send requests directly to the provider (such as Google or Anthropic) instead of through OpenRouter; their policies apply to those requests.

We do not share personal data with any other third party.

We retain:

• Account data — for the lifetime of your account
• Usage logs — indefinitely (financial audit trail for billing disputes)
• Payment records — indefinitely (legal / accounting requirements)

Deleting your account in Settings deactivates it straight away: you can no longer sign in, and your API keys stop working. To have your personal data erased as well, email us; usage logs and payment records tied to billing may be kept where the law requires it. Failed-email records are deleted after 30 days.

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account
• Object to certain processing

To exercise any of these rights, please contact us (see below).

Questions about this policy? Email us at privacy@neurongate.net.