Privacy Policy

Last updated: January 2025

1. Data We Collect

We collect your email address (for authentication), API usage metadata (token counts, timestamps, status codes), and optional use case description from the waitlist form.

2. What We Don't Store

We do not store the content of your messages or Hermes responses. Request bodies are proxied in real-time and not logged. API keys are stored as SHA-256 hashes only.

3. How We Use Data

Email: authentication and service communications. Usage data: billing calculations and system monitoring. We do not sell your data to third parties.

4. Data Security

All data is stored in Supabase (Postgres) with Row Level Security enabled. API keys are hashed before storage. All traffic is encrypted via TLS.

5. Data Retention

Usage logs are retained indefinitely for billing purposes. You may request account deletion by contacting contact@codecrack.dev.

6. Contact

For privacy-related inquiries, email contact@codecrack.dev.