Privacy policy

Accounts and service records

We use your email address and account profile to provide access to the service. Account records, API key records, usage, orders, payments and support tickets are used to operate your account, calculate charges and respond to support requests. International account and billing records are separate from other OpenOx services.

Model requests and chat history

Model requests are sent to the selected upstream model service to generate a response. Usage information is recorded for billing. Chat conversations and uploaded assets may be saved so that you can continue a conversation; temporary chats and deletion follow the controls available in your account. Avoid submitting information that you do not want processed by the selected service.

Optional social sign-in

When available, Google or GitHub sign-in is optional. It uses your provider identifier, public profile and verified email to create, identify or link an account. Google sign-in requests openid, email and profile, not Gmail, contacts or Drive access. GitHub sign-in requests user:email, not private repository access. Provider access tokens are used for authentication and are not stored as account records. Linking requires an existing account session, your authorization and a matching verified email; matching email addresses do not automatically merge accounts.

Passwords for Google accounts

After creating an account with Google, you can set a separate OpenOx password. You can then sign in with your Google email address and that OpenOx password. We never ask for or store your Google password.

Optional analytics and replay

Optional analytics and Microsoft Clarity session replay follow your browser consent settings. When enabled, Clarity may receive masked page layouts, page paths, clicks, scrolling, device information and your internal account ID. Network connections also disclose your IP address to Microsoft. Keys, chat, settings, administration and pages with URL parameters are excluded from replay. Ordinary recordings are retained for 30 days; favorites may be retained for up to 9 months.

Change your preference in Cookie settings. Withdrawing consent stops future collection in this browser, but does not erase data already submitted. See the Clarity terms and Microsoft privacy statement.

Browser storage and security

Your browser stores the session and preferences needed to use the service. Security and request logs may include request times, IP addresses and browser details to help investigate errors and prevent abuse. Keep login credentials and API keys private.

Your choices

You can manage your profile and API keys in your account. Revoke optional social authorization in your provider's account settings. Revocation does not automatically delete your OpenOx account or existing sessions. Contact us to request access, correction or deletion of account information; we may need to verify account ownership. Never include a password or complete API key.

Or email [email protected].