TEKIZ.AI Privacy

Data we process

• Your account ID and email from Supabase Auth, which we use to give you access to your account.
• Billing records from Stripe or an agreed manual payment process, including customer ID, selected plan, subscription status, and payment status.
• The prefix, status, plan, and dates for generated API keys. We store a hash of each key and show the full key only once.
• Counts used to enforce quotas and rate limits, and to measure first requests, conversions to paid plans, and paid accounts that continue to use the service.
• Request details such as the selected provider and model, status, timing, error type, estimated token counts, and whether a backup route was used.

Provider credentials

When you use a local or private router, keep provider credentials on a machine, server, or Tailnet host you control. Do not send provider credentials, OAuth tokens, private keys, or other secrets to support unless we have agreed on a secure process.

How we use data

Hosted data is used to sign users in, check API keys, apply usage limits, process billing, show request status, prevent abuse, fix reliability problems, and improve the product.

Services that process data

The hosted service uses infrastructure and services such as Supabase, Stripe, Cloudflare, Google Cloud, GitHub, and customer-selected model providers. Those services may process data according to their own terms and privacy policies.

Retention and deletion

We may keep operational records as needed for security, billing, accounting, abuse prevention, reliability work, and legal obligations. You can revoke generated API keys from your account. To request an account review or deletion, contact support.

Security

The hosted web app uses HTTPS, HSTS, a Content Security Policy, frame blocking, referrer controls, and account and API key checks. These controls reduce risk. You remain responsible for securing your provider accounts, local routers, API keys, and Tailnet hosts.