Privacy policy

What we collect

Account. You sign in with Google. Google shares your name, email address, profile picture and Google account ID with us. We never see your Google password.

Sessions. While you are signed in we keep a session record with your IP address and browser user agent, so we can keep you signed in and spot misuse.

API keys. We store the name you give a key, its first few characters, when it was created and last used, and a one-way hash of it. The full key is shown to you once and never stored.

Usage. For every billable call we record which tool ran, how many tokens it cost and when, and we keep a running token count per month.

Content. The prompts, reference images, audio and other files your agent sends to the tools, and the files the tools produce.

Payments. Payments are handled by our payment provider. We receive your plan, subscription status and billing period, but never your card details.

Analytics. The website uses an analytics service that collects pages viewed, device and browser information and approximate location through cookies or similar identifiers.

How we use it

To run the service: sign you in, check API keys, perform the operations your agent asks for, meter tokens against your plan and deliver the results.

To support you, prevent abuse and keep the service secure, and to understand how the website is used so we can improve it.

We do not sell your personal data, and we do not use your prompts, inputs or generated files to train models.

Who we share it with

Only with the providers that run parts of the service, and only what each needs: hosting, database and file storage, sign-in, payments, analytics, and the AI model providers that perform generation.

AI model providers receive the prompt and input files of the request they perform. Each provider handles that data under its own terms and privacy policy.

We may also disclose data when the law requires it.

How long we keep it

Account, key and usage records are kept while your account exists.

Generated files are stored privately. Download links expire after 24 hours, and stored files may be deleted at any time, so save what you need.

When you ask us to delete your account, we delete your profile, sessions, API keys, usage history and stored files. Our payment provider keeps payment records as the law requires.

Cookies

One cookie keeps you signed in; the website does not work without it. The analytics service sets its own cookies to measure visits.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email us and we will reply within 30 days. If you are in the EU or the UK, you can also complain to your data protection authority.

Security

All traffic is encrypted with TLS. API keys are stored only as hashes, and the database and file storage are reachable only from our servers.

Children

The service is not meant for anyone under 16, and we do not knowingly collect their data.

Changes

If this policy changes, we will update the date at the top of this page. For significant changes we will also let you know by email.

Contact

Questions or requests: se.chemodanov@gmail.com