Privacy Policy

Last updated 17 September 2026

infer0 is a gateway: your request passes through us on its way to a model provider, and we meter what comes back. The most important thing to know is what we don't keep.

We do not store your prompts or the model's replies

This is an architectural property, not a promise of restraint. There is no column in our database for request or response content, and our internal rules forbid writing request bodies, response bodies or API keys to logs or error messages. What we record about a request is metering data — how many tokens, of which kind, at what price.

Your prompt is, of course, transmitted to the upstream provider that serves it. We hold it in memory only long enough to forward it and stream the reply back to you.

What we do collect

• Your account. Name, email address and a hash of your password. We never see the password itself.
• Your API keys. Stored as a SHA-256 hash for lookup, plus an encrypted copy so you can view a key again in the dashboard. The plaintext is never stored.
• Request metadata. Per request: the model, which API format you used, whether it streamed, the outcome, token counts, the prices in force at the time, the cost, which upstream served it, how many attempts it took, timing, and any error message the provider returned.
• How you found us. On your first visit: the site or post that linked you here, and the campaign name in the link if it carried one — or that you came directly. It is tied to your account when you sign up.
• Your balance and ledger. Every credit and charge, so the numbers on your Billing page can be traced.
• Payment records. The identifier and amount of each payment. Card details are handled entirely by Stripe and never reach our servers.

Who else sees it

We use a small number of processors, each for one job:

• Upstream model providers — they receive the content of your requests, because that is what fulfils them. Which provider served a given request is shown on your Usage page.
• Neon — our database, hosted in Oregon, United States.
• Vercel — application hosting.
• Stripe — payments. Read their privacy policy.

We do not sell your data, and we do not share it for advertising. Because our database and several providers are in the United States, your data is processed outside Canada.

How long we keep it

Account details and API keys last until you delete them. Ledger entries are financial records and are kept for as long as the law requires, which in Canada is generally six years. Request metadata is kept so your usage history stays meaningful; ask and we'll delete what is not needed for billing. How you found us is kept with your account; for a visit that never became an account it is kept until we delete it, and there is no automatic expiry today.

Your rights

You can ask what we hold about you, ask for it to be corrected, or ask us to delete your account. Write to support@infer0.ai and we'll act within 30 days. If you are in the EU or UK, the GDPR rights of access, rectification, erasure, restriction, portability and objection apply, and our basis for processing is performance of our contract with you. If you are in Canada, PIPEDA and British Columbia's PIPA apply, and you may complain to the Office of the Privacy Commissioner.

Cookies

We set cookies that keep you signed in, and one more: a visitor cookie, set on your first visit and kept for a year, that holds only a random id. How you arrived — the site or post that linked you here and its campaign name, or none — is kept on our server under that id, and tied to your account when you sign up. All of them are ours alone and are never shared. There is no advertising or third-party analytics tracking on this site.

Security

Traffic is encrypted in transit. Passwords are hashed, API keys are hashed for lookup and encrypted at rest, and upstream provider credentials are encrypted with a key held outside the database. No system is perfect; if you find a weakness, please tell us at support@infer0.ai.

Changes, and who to ask

If we change this policy materially we will say so by email before it takes effect. infer0 is operated by Becitizen Inc., Vancouver, British Columbia, Canada — the data controller for this service. See also our Terms of Service.