Privacy Policy
Last updated: 2026-04-25
What we collect
- Account: name, email, phone (Clerk-managed), plan, payment status.
- Usage metadata: model used, token counts, cost, timestamp, request ID. We do not store prompt or response content.
- Billing: subscription history, credit purchases, transaction IDs from aamarPay/Stripe.
- Operational logs: standard server logs (IP, user-agent) for security and debugging, retained 30 days.
Where your prompts go
Your prompts are forwarded to whichever upstream provider our routing layer selects (DeepSeek, Z.ai, Alibaba, MiniMax, Moonshot). Each provider has its own data-handling policy. By default, prompts may be processed in jurisdictions outside Bangladesh, including China. If this matters for your use case, contact support before submitting sensitive content.
Caching
We use Redis to cache identical prompts for cost optimization. Cached entries are keyed on a hash and expire within 1 hour. Cache contents are never exposed to other users.
Your rights
- Export: download all your data as JSON from Settings → Danger zone.
- Delete: permanently delete your account and all data from the same page.
- Correct: profile fields editable via Settings → Profile.
Third-party processors
- Clerk (authentication)
- Supabase / Neon (Postgres hosting)
- Vercel (web hosting)
- aamarPay (BDT payments)
- Stripe (USD payments, when enabled)
- Upstream AI providers as listed above
Contact
Privacy questions: privacy@omnizen.ai