Privacy notice

What we never store

Prompt content, uploaded files, tool arguments, and model completions are processed in memory to answer the request and are gone when the connection closes. They are not written to disk, not logged, not reviewed by a human, and never used to train anything — ours or anyone else’s.

The practical consequence is worth stating plainly: we cannot recover your prompts, and we cannot hand them to anyone who asks, because we do not have them.

What we do store

• Account — your email address, plus short-lived sign-in records: hashed one-time codes (valid 10 minutes) and hashed session tokens (valid 30 days). We never see or store a password, because there are none. If you choose Google sign-in, Google confirms your email address to us and we store nothing else from your Google account.
• Billing — top-ups, balance, refunds, invoice records, and per-request metering: timestamp, model id, key id, and token counts.
• Security — a short-lived request log holding IP address, user agent, HTTP status, and timing. It contains no request or response body.
• Support — whatever you write to us in an email or abuse report.

Why we are allowed to hold it

• Performing our contract with you (Art. 6(1)(b) GDPR) — running the account, metering usage, taking payment.
• Legal obligation (Art. 6(1)(c)) — accounting and tax records under Czech law.
• Legitimate interests (Art. 6(1)(f)) — keeping the service secure, preventing fraud and abuse, and defending legal claims. Our interest here is balanced against your rights by keeping these logs minimal and short-lived.
• Consent (Art. 6(1)(a)) — only if you opt in to product email. You can withdraw it at any time from the email itself.

Who else touches it

We use a small number of processors, each bound by a data-processing agreement and each given only what its job requires:

• Resend — transactional email. It delivers the one-time sign-in codes to your address and sees nothing else.
• [Payment provider] — payments and invoices. Card details go to them, never to us.
• [GPU compute provider] — the machines the models run on. Your prompts pass through that hardware while the request is being answered, and are not retained there.
• [Hosting / email provider] — the servers this site and our email run on.

We do not sell personal data, and we do not share it with advertisers or data brokers. We disclose it to authorities only where a legally binding order requires it — and what exists to disclose is the billing metadata above, not your prompts.

Transfers outside the EU

Some processors operate outside the European Economic Area. Where that happens, the transfer relies on an adequacy decision or on the European Commission’s standard contractual clauses. Ask at [email protected] and we will tell you which mechanism covers which processor.

How long we keep it

• Account data — while the account exists, then 30 days.
• Sign-in records — hashed one-time codes expire after 10 minutes; hashed session tokens after 30 days, or immediately when you sign out.
• Billing and invoice records — for the retention period Czech accounting and VAT law imposes, currently up to 10 years, regardless of account closure.
• Security logs — 30 days, then deleted.
• Support email — 24 months.

Cookies

The public site sets no cookies and runs no analytics or third-party trackers. Signing in sets one essential session cookie so the console knows who you are. No consent banner appears because there is nothing to consent to.

Your rights

Under the GDPR you can ask us for a copy of your data, correct it, delete it, restrict or object to processing, and receive it in a portable format. Write to [email protected]; we answer within one month. Note that deletion cannot reach records we are legally required to keep, such as issued invoices.

You can complain to your local supervisory authority. In Czechia that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

Automated decisions and children

We do not make automated decisions with legal or similarly significant effects about you. Automated abuse limits can throttle or block a key; a human reviews any such decision on request. The service is not intended for anyone under 18 and we do not knowingly collect their data.