Security and data handling

Metadata, not secrets

Send request timing, status, model names and token counts from your backend. Do not include model API keys, passwords, full prompts or response text.

Access protection

Project API keys scope ingestion to their project and can be revoked. Sensitive account operations require email verification. Console changes use session-bound CSRF protection and HttpOnly session cookies.

Retention and deletion

Queryable detail follows the active plan retention window. Project deletion revokes keys and removes analytical detail asynchronously. These controls are not an independent certification or availability guarantee.

Security contact: 13428961230@163.com