Get Pass
Legal

Privacy policy

Last updated

This policy explains what ProjectCOZY collects when you use the website, the dashboard and the API, and how that information is used.

At a glance

  1. 1OverviewOnly what the service needs to run.
  2. 2Data we storeYour account, a hash of your key, and usage counts.
  3. 3Prompts and completionsPassed to the model provider. Never sold.
  4. 4Third-party servicesPayments, email, sign-in and hosting, each seeing only what it needs.
  5. 5How we use your dataTo run the service. Not sold, not used for marketing.
  6. 6Retention and your controlKept while your account exists. Ask us to delete it.
  7. 7ContactContact us from your dashboard.

1Overview

ProjectCOZY collects the information needed to operate your account, provide access to the models we route, process payments and secure sign-in. We collect what the service requires to function and nothing beyond it.

This policy covers the ProjectCOZY website, the dashboard and the API gateway. It does not cover the upstream model providers your requests are routed to, who operate under their own terms.

2Data we store

For email accounts we store your email address, name, a hash of your password, billing records, API key metadata and usage history. We never store your password itself, and we never store your raw API key: only a SHA-256 hash of it, which is why a key can be shown to you exactly once.

For Telegram sign-in we store the account identifier and profile details the provider returns, which is the minimum needed to recognise you on your next visit.

Usage history means request counts, token totals and which model alias was called. It is what powers the analytics in your dashboard.

3Prompts and completions

Your prompts and the responses returned to you pass through the gateway in order to reach the model provider. We log metadata about each request, such as timing, model and token counts, so that usage can be reported to you accurately.

Requests are routed to upstream providers to be served. Those providers process the content of your prompts under their own policies, and you should review them if you intend to send sensitive or regulated data through any AI API, ours included.

4Third-party services

We rely on Binance Pay for billing, a transactional email provider for account mail, Telegram for optional sign-in, and standard infrastructure providers for hosting, databases and caching.

Each receives only the data required for its function. The payment provider, for example, sees the transaction but not your prompts or your API key.

5How we use your data

We do not sell your personal information, and we do not share it with third parties for marketing. Data is used to operate ProjectCOZY, to prevent abuse and fraud, to support you when you contact us, and to meet legal obligations.

Aggregate, non-identifying figures such as total requests served may be used to describe the service publicly. Nothing that identifies you or reveals your prompt content is used this way.

6Retention and your control

Account and billing records are kept while your account exists and for as long afterwards as tax and accounting rules require. Usage logs are retained to power your dashboard analytics.

You can revoke and regenerate your API key at any time from the dashboard, which immediately invalidates the previous key. To request account deletion or a copy of the data we hold about you, contact us through the channels below.

7Contact

For privacy questions, data requests or account help, contact us from your dashboard. We aim to respond within a few days, and sooner for anything affecting access to your account.