Privacy

Conversation history is stored in your browser and separated by account or guest. Signing out clears the local conversation data for that session. The service records query text, usage, language and network address for billing, quotas, abuse prevention, troubleshooting and aggregate analysis. To recover an answer after a refresh or brief connection loss, the latest request result is stored temporarily and deleted automatically within 24 hours.

To improve the service, we also record information normally exposed by the browser: anonymous visitor and visit-session identifiers, page and visit times, referrer and UTM parameters, browser and operating-system category, device category, viewport and screen size, language, time zone, connection category and PWA status. A third-party IP geolocation service may infer country, region, city and network provider from the network address. This is an approximate result, not precise GPS location. We do not request contacts, photos, camera, microphone or hardware serial numbers, and we do not use hidden Canvas-style fingerprinting.

Query text, network addresses and visit-level details follow the configured retention period, 90 days by default, and are then removed. Billing amounts and token totals may be retained for reconciliation. API keys, password hashes and payment records are never placed in browser caches. Deleting your account removes the account, keys, balance and linked usage, and disassociates retained visit records from the account.

We do not publicly sell your query or visit data. Do not submit unnecessary identity, banking or third-party private information.