Privacy Policy

This policy explains what OpenScale, operated by AFG Ventura Teknologi ("we", "us"), collects when you use openscale.so and the OpenScale API, and how we use it. The short version: we collect what we need to run the service and bill you, we do not sell your data, and we do not run advertising or tracking.

• Account information: your name, email address, and a hashed form of your password. We never store passwords or API keys in plain text.
• Billing information: your payment history and credit balance. Card details are handled by our payment processor and never touch our servers.
• Usage data: API request metadata such as timestamps, model used, token counts, and response status, used for billing and the usage views in your dashboard.
• Request content: the inputs you send to models and the outputs they return pass through our systems to serve your request and are not stored by default. See the data policy section below.
• Cookies: a session cookie to keep you signed in. No advertising or cross-site tracking cookies.

• To provide and operate the service and your dashboard.
• To meter usage and bill your credit balance.
• To prevent abuse, fraud, and security incidents.
• To send you service emails such as verification, receipts, and important account notices. We do not send marketing email without your consent.

We share data only with the providers we need to run the service:

• Model providers: when you call the API, your request content is forwarded to the model provider that serves the model you selected. Their handling of that content is governed by their own policies.
• Infrastructure: our hosting and database provider (Google Cloud).
• Payments: our payment processor (Stripe), for checkout and receipts.
• Email: our email delivery provider, for transactional messages.

We do not sell personal data, and we do not share it with advertisers. We may disclose information if required by law.

This section is the authoritative statement of how API request content is handled:

• No training: we never use your prompts or model outputs to train models, and we never sell them.
• No content retention by default: API request and response bodies are not stored. We store request metadata only (timestamps, model, token counts, latency, response status), which we keep for 30 days for billing, abuse prevention, and reliability work.
• Playground: requests you make from the in-dashboard playground are part of your account history and may be stored so you can review them.
• Zero data retention, end to end: every chat model in the catalog is served under the same terms wherever it runs, whether on our own infrastructure or on a serving partner we have bound to them: no retention of request or response content and no training on it. You can pin the region a request is served from with the region field, and every region serves every chat model. Serving locations and zero-data-retention status are published in our /v1/models catalog.

We keep account and billing records for as long as your account is active and as needed for accounting obligations. Request metadata is kept for 30 days as described above, and you can ask us to delete it. When you close your account we delete your personal data within a reasonable period, except what we must keep by law.

Traffic to and within the service is encrypted in transit, API keys are stored hashed, and access to production systems is restricted. No system is perfectly secure, so if we learn of a breach affecting your data we will notify you without undue delay.

You can access and update your account details in the dashboard, and you can ask us to export or delete your data by emailing hello@openscale.so. We will respond within a reasonable time.

We may update this policy from time to time. For material changes we will notify you, for example by email or a notice in the dashboard.

Privacy questions: hello@openscale.so.