Privacy

What we process

• Account identifiers, organization membership, and authentication data needed to sign in on this site and mint or revoke sk-sx-… keys.
• API authentication and request metadata required to accept, refuse, meter, and abuse- prevent Responses calls (for example timestamps, model id, token counts, status).
• Request content is processed to produce the model response and to operate safety, metering, and abuse controls. Residual provider routing is not a customer privacy setting and is not published as a customer API.
• Billing quantities for AI SELL meters. Project invoices and entitlements are Commerce, not this notice.

What this is not

• We do not use Binding as the AI envelope. Do not send Binding to the peel.
• We do not sell prompt text as a public dataset, and we do not treat leftover remaining or residual COGS as a customer list price.
• Public catalog rows on this site are admitted SKUs and list SELL. They are not a dump of subprocessors, connector manifests, or private seats.

Keys and retention

• Organization keys are secrets. The site shows prefixes so you can recognize a key; store the secret yourself. Revoke a key from the console.
• We keep account, key, and usage records for as long as needed to operate the service, settle meters, and meet a legal obligation, then delete or constrain them.

Your requests

Use the signed-in console for account access and key revocation. For a data-subject request about your account, write from the email on that account. Security issues go to [email protected] — do not send secrets or customer content to that address in the first message.