Privacy
Account and API keys
We store your email address and the authentication records needed to create your account, sign you in, and reset your password. We use a session cookie to keep you signed in. Password resets send your email address and reset link to our email delivery provider. When you create an API key, the full secret is shown once. We retain its hash and prefix, not the secret itself.
Payments
When you begin checkout, we send your email address, order ID, and payment amount to our payment processor. We retain order, invoice, and transaction records to confirm payment and credit your balance. Depending on the payment method, transaction details are public on a blockchain and cannot be deleted by Arscelare.
API requests
We process your prompts to generate replies. For billing and usage history, we record token counts, cost, status, and timing. We do not store prompt or reply text in our database.
Account deletion
Deleting your account removes its login details and revokes its API keys. Billing, usage, and revoked-key records remain under your former account ID. Payment records can still be linked to your email through our payment processor. Deleting your account does not delete records held by the processor.