Template — please have it reviewed by legal counsel before relying on it.
Effective date: 2026-11-02
This Privacy Policy explains how CoreAPI ("we", "us") collects, uses and protects information when you use our website, console and API gateway (the "Service").
1. Information we collect
- Account information: email address, username, password hash, and optional profile or organization details you provide.
- Usage logs and metadata: request time, model name, token counts, cost, latency, status codes, API key identifier and IP address. These are used for billing, quota enforcement, abuse prevention and troubleshooting.
- Payment information: payments are handled by third-party payment processors. We receive order details (amount, currency, status, order ID) but do not store full card numbers.
- Support communications: messages you send to us.
2. Prompts and completions
To fulfil a request, the content of your prompts and the generated completions is transmitted to the upstream model provider you select. We do not use your prompts or completions to train models. Upstream providers process this content under their own terms and privacy policies, which you should review.
3. How we use information
To provide and operate the Service, calculate charges, secure accounts, detect fraud and abuse, respond to support requests, and meet legal obligations.
4. Log retention
Usage metadata is kept for as long as needed for billing, accounting and security purposes, and then deleted or anonymized. Request content is not stored beyond what is technically necessary to deliver the response, unless you enable a feature that explicitly stores it.
5. Cookies
We use essential cookies to keep you signed in and remember preferences such as language and theme. We do not use cookies to sell your data.
6. Sharing
We share information only with upstream model providers (to process your requests), payment processors, infrastructure providers acting on our behalf, or when required by law. We do not sell personal information.
7. Your rights
Depending on where you live, you may request access to, correction of, export of, or deletion of your personal information, or object to certain processing. You can also delete your account from the console.
8. Security
We use encryption in transit, access controls and identity verification for sensitive actions. No system is completely secure; please keep your API keys confidential.
9. Changes
We may update this policy. Material changes will be announced on the website, and the effective date above will be updated.
10. Contact
Questions about privacy: privacy@example.com