Privacy Policy

What we collect

Account data from email or Google sign-in: name, email address, and profile picture. Organization data you enter: organization name, members, API key names. Billing data handled by Stripe: we store Stripe customer and payment identifiers, never card numbers. Usage metadata per API request: timestamp, model, token counts, cost, and status.

What we do not collect

We do not store the content of API requests or responses. Prompts and completions pass through our servers to the model provider and are not written to disk, logs, or databases. Only token counts and prices are retained.

How data is used

To operate the Service: authenticate you, meter and bill usage, show usage reports, prevent abuse, and reconcile our costs with the model provider. We do not sell personal data or use it for advertising.

Third parties

Clerk (authentication and invitation email), Google (social sign-in), Stripe (payments), Vercel (hosting), Neon (database), and the model provider that processes your requests. Each processes data under its own terms. Requests forwarded to the model provider carry a non-reversible organization identifier and no personal account data.

Retention and deletion

Account and usage records are kept while your organization exists and for accounting purposes afterwards. You may request deletion of your account; billing records required by law are retained.

Security

API keys are stored only as one-way hashes. Secrets are held in the hosting platform’s encrypted store. Access to production systems is restricted to Glaris Inc. staff.

Contact: shaurya@florin.inc