1. Information We Collect

We collect the following information when you use TheOldAPI:

• Account Information: Email address and hashed password for authentication.
• Payment Information: If applicable, this is processed securely by our payment provider. We do not store card numbers.
• Usage Metadata: Request counts, timestamps, and model selections for rate limiting and billing.

2. How Your Information Is Handled By Us

We take your privacy seriously. We do not:

• Train any models on your data.
• Share your content with third parties beyond the AI provider you selected.
• Track your browsing activity outside of our Service.

We log prompts and AI model responses for abuse prevention and moderation. These logs are deleted on each API cycle reset unless retained for active abuse/security review.

3. How We Use Your Information

• Authenticating your API requests.
• Enforcing rate limits and usage quotas.
• Processing subscription payments.
• Communicating service updates or security notices.

4. Data Routing

When you make an API request, your prompt is sent directly to the selected upstream AI provider (for example OpenAI, Anthropic, or Google). We act as a proxy and do not modify your request content. Each provider has its own privacy policy that governs its data handling.

5. Data Security

We use industry-standard security controls including:

• TLS encryption for all API traffic.
• Hashed and salted password storage.
• API key rotation capabilities.
• Regular security audits.

6. Data Retention

Account data is retained for the duration of your account. You may request deletion of your account and associated data at any time.

7. Third-Party Services

• Supabase: Authentication and user management.
• Upstream AI Providers: Model inference (your requests are forwarded to these providers).

8. Your Rights

• Access your personal data.
• Request correction or deletion of your data.
• Export your account information.
• Withdraw consent and close your account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service.

10. Contact

For privacy-related questions, reach out on our Discord server.