Last updated: April 2026
We collect your email address when you create an API key. We log API request metadata: timestamp, model used, token counts, latency, and status. We do not log prompt content or response content.
Your email is used only to associate API keys with your account. Request metadata is used to generate trace logs accessible only to you via your API key. We do not sell or share your data with third parties.
Data is stored in Supabase (PostgreSQL) with Row Level Security enforced. API keys are stored as bcrypt hashes — the raw key is never stored. Tool auth headers are stored encrypted using AES-256.
Trace logs are retained indefinitely on the free plan. You can delete your account and all associated data at any time by contacting us.
Your prompts are forwarded to AI providers (Anthropic, OpenAI, Google) based on your routing selection. Each provider has their own privacy policy governing how they handle API requests.
Questions about this policy: privacy@filament.works