Data handling.

Your prompts and responses

We process your prompt to generate a response and return it to your application. We do not store prompt or response content in our gateway logs or usage records. Prompt storage is disabled in the gateway.

Usage, billing, and security metadata are handled separately, as described below.

Usage and operational records

We keep metadata needed to meter API usage, bill accounts, and operate the service. This includes request and account identifiers, the endpoint used, timestamps, request status, error categories, token counts, cost, and response size.

These usage records contain measurements of a request, without its prompt or response text.

Retention

Gateway usage logs have a 90-day retention period.

Account, billing, payment, and security records are maintained separately. The gateway’s 90-day usage-log period does not apply to those records.

Account and security information

Account information includes your email address, authentication records, and account status. Security records can include sign-in activity, session information, and IP addresses associated with account activity.

These records support account access, billing, and investigation of misuse. They are separate from the content you send to the model.

Your tools and applications

Your SDK, agent, application, or other services may keep their own histories or logs. Review their settings separately when working with sensitive information.

Avoid including secrets or personal data that your request does not need. Never share API keys in support messages.

Questions about your data

Contact hello@derestricted.ai for questions about data handling, account records, or retention requirements.