Privacy Policy

• Account: your name and email address. With email sign-up, a hash of your password (never the password itself). With Google sign-in, the name, email address and profile picture Google shares.
• Sessions and security: the IP address and browser user agent of each signed-in session, and IP-based counters used to rate-limit sign-in attempts.
• API keys: a SHA-256 hash and the first few characters of each key. The full key is shown once when you create it and is not stored.
• Usage: for every API request, the model, token counts, cost, status, latency and time.
• Billing: your balance and top-up history. Card details go straight to Stripe; we never see or store them.

We do not store the content of your prompts or of the model responses. They pass through Refillhub only to reach the model and come back to you.

• to run your account, sign you in and keep it secure;
• to route requests, charge your balance and show you your usage and spend;
• to prevent abuse, such as bots, fraud and attacks;
• to answer you when you write to us.

We do not sell your data and we do not use it for advertising.

• OpenRouter and the model provider you choose receive your prompts to produce a response. Their own privacy policies apply to that processing.
• Supabase hosts the database (region: Singapore).
• Google handles “Continue with Google” sign-in.
• Cloudflare provides DNS and the Turnstile bot check on sign-up and sign-in.
• Stripe processes top-up payments.
• Resend sends password-reset emails, when email is enabled.

Refillhub sets only the cookies needed to keep you signed in. Cloudflare Turnstile may set its own cookie to tell people from bots. There are no analytics or advertising cookies.

• Account, keys, balance and usage records: while your account is open.
• Sessions: until you sign out or they expire, at most 14 days without use.
• Rate-limit counters: one current count per IP address, overwritten as it goes; no history is kept.

When you delete your account, its sessions, keys, balance, ledger and usage records are deleted with it. Payment records kept by Stripe follow Stripe’s retention rules.

Write to refillhub.net@gmail.com from the email address on your account to get a copy of your data, correct it, or delete your account. We reply within 30 days.

Traffic is encrypted with HTTPS. Passwords and API keys are stored only as hashes, and the database is closed to Supabase’s public data API.

We will post changes on this page and update the date at the top. See also the Terms of Service.