Privacy Policy

1. Data we collect

Account data: your email address and, if you sign in with Google, your basic OAuth identity. Authentication data: session records and, where applicable, one-time sign-in tokens.

Service data: API keys (stored only as hashes), subscription and voucher records, request metadata (timestamps, model alias, token counts, status, correlation identifiers), and usage rollups.

Technical data: IP address and similar signals used for security, rate limiting, and abuse prevention.

2. Prompt and response content — Zero Data Retention by default

NaraRouter is Zero Data Retention (ZDR) by default: we do not store your prompts, messages, images, or model outputs. To fulfil a request your content is transmitted — not stored — to the underlying model provider (or publisher account) that serves your selected alias, and is then subject to that provider's own retention and data-use terms.

We do not use your prompt or output content to train our own models, and we do not sell it. Operational debugging keeps only request metadata (timestamps, alias, token counts, status, correlation IDs, latency) plus the last 5 redacted error diagnostics per user — capped at 4 KiB each, auto-expired after 24 hours, and never containing bodies or prompts.

Do not submit personal or confidential data you are not authorised to share.

3. How we use data

We use personal data to provide and secure the service, authenticate you, enforce subscription tiers and fair-use limits, meter usage, prevent and investigate abuse and fraud, provide support, and comply with legal obligations.

Our legal bases include performing our contract with you, our legitimate interest in operating a secure service, and compliance with law.

4. Sharing and subprocessors

We share data with service providers who process it on our behalf, including the underlying model providers that serve requests, and our hosting and infrastructure providers. These parties are bound to use the data only to provide their services to us.

We may disclose data where required by law or to protect our rights, users, or the security of the service. We do not sell personal data.

5. Security

We apply technical and organisational safeguards, including encryption of sensitive credentials at rest, hashing of API keys, encrypted transport, access controls, and audit logging of administrative actions. No system is perfectly secure, but we work to protect your data and to respond to incidents.

6. Retention

We keep personal data only as long as needed for the purposes described here or as required by law. Account data is retained while your account is active; request metadata and usage rollups are retained for defined operational periods and then pruned or aggregated. Prompt and output content is not retained by us. Gateway error diagnostics (redacted, 5 per user) expire after 24 hours.

7. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.

8. International transfers

Because the underlying model providers and infrastructure we rely on may operate outside Indonesia, your data may be processed in other countries. Where we transfer data internationally, we take steps to ensure an appropriate level of protection consistent with applicable law.

9. Children

NaraRouter is not directed to individuals under 18, and we do not knowingly collect their personal data. If you believe a minor has provided us data, contact us so we can address it.

10. Changes to this Policy

We may update this Policy from time to time. We will update the date above and, for material changes, provide additional notice where appropriate.