Privacy Policy
The short version: we can't leak what we never stored.
That sentence is about your prompts and completions. Below is everything else, in full.
What we don't store
Prompts. Completions. Conversation content of any kind. Requests are processed in memory and discarded. There is no database table, log file, or analytics pipeline that ever holds your content: the gateway runs with content logging disabled, its error logs are disabled, and our own tables have no column that could hold it. This is architectural, not a promise. We never train on, sell, or share user content — there's nothing to train on.
What we store (the complete list)
| Data | Why |
|---|---|
| Account ID + email | Login |
| Credit balance + ledger entries | Billing |
| Token counts per request (numbers, no content) | Metering |
| Hashed API keys, key labels | Authentication (raw keys shown once, never stored) |
| Per-request model name and cost, with the token counts | Metering, abuse detection (12 months) |
| AUP acceptance and 18+ confirmation timestamps | Compliance |
| Authentication and access logs from our hosting providers (IP address, user agent, timestamps) | Security, abuse detection; bounded retention (currently up to 30 days), no profiling |
Processors
- Stripe — card payments, once we enable them (not live at launch; top-ups are crypto until then). Stripe receives your payment details; we never see card numbers.
- NOWPayments — crypto top-ups. Same principle; the paying wallet address is visible to NOWPayments, not to us.
- Supabase — authentication and the database above (US-East). Cloudflare — DNS and traffic protection.
- GPU hosts (self-hosted models) — process requests in memory on our containers; nothing is retained.
- No third-party model providers. Every model on the sheet runs on our own GPU containers. If we ever route a model to an upstream provider, the price sheet will name the provider and this list will be updated first.
Legal requests
We respond to valid legal process per our Law Enforcement Guidelines: subpoena for basic records, court order for metadata, warrant for content. We notify affected users unless legally barred. Because we store no content, most content requests are answered by the architecture itself.
Your rights
Delete your account yourself from the console, or email privacy@cheapweights.ai to export or delete it. Deletion removes the account, keys, and metering rows; ledger entries required for accounting are retained as amounts only, detached from any identifier. Unused credits are not automatically refunded on self-service deletion; contact us first if you want them back.
Changes
Material changes are announced on the site 14 days before taking effect.