Privacy Policy

1. Core Philosophy: Zero-Payload Retention

AI Circuit Breaker operates as an in-line reverse proxy. We believe in strict data minimization. We do not store, log, or train on the text contents of your prompts or completions.Request payloads are parsed in volatile memory solely to calculate prompt hashes for recursion detection and token counts for cost caps, then immediately streamed through to the upstream model provider.

2. Information We Store

• Account Credentials: Your email address and hashed passwords, managed via Supabase Auth.
• Encrypted Upstream API Keys: Third-party provider keys (e.g. OpenAI) provided by you are encrypted using AES-256 (Fernet) prior to storage. Plaintext keys are never written to disk or database logs.
• Circuit Breaker API Keys: Proxy keys issued to you are hashed with SHA-256. Only the hash and an 8-character prefix are stored.
• Operational Metadata: We log request metadata for billing and dashboard reporting: timestamp, session identifier, model name, token usage counts, calculated cost, HTTP status code, and whether a circuit breaker rule terminated the request.

3. Cookieless Analytics

Our website uses Vercel Web Analytics. We do not use third-party tracking cookies or advertising pixels. All telemetry is aggregated and privacy-friendly, fully compliant with GDPR without requiring invasive cookie consent banners.

4. Payment Processing (Merchant of Record)

Paid subscriptions are billed through Polar Software Inc., acting as our Merchant of Record. Polar handles all payment transactions, invoicing, and applicable EU/Norwegian VAT. We do not store or process your credit card numbers or banking credentials.

5. Contact & Data Deletion

You have the right to inspect, export, or permanently delete your account and all associated keys. For privacy inquiries or immediate account purge requests, contact:

contact.roandejager@gmail.com