Privacy Policy

1. Overview

This Privacy Policy explains what information Vikey collects when you use our API gateway and dashboard, why we collect it, and the choices you have. By using Vikey, you agree to the collection and use of information as described here.

2. Information We Collect

Account information: name, email address, and password (hashed, never stored in plain text), or your Google account identifier if you sign in with Google.

Billing information: top-up amounts, transaction history, and balance. Payment is processed via QRIS through our payment gateway partner; we don't receive or store your bank account number, card details, or e-wallet credentials, since those stay with the payment gateway.

Usage data: which models you call, request timestamps, token counts, and cost per request, so we can bill accurately and show you usage history. Detailed per-request logs are kept for a limited window for troubleshooting purposes; aggregated daily summaries are kept longer as part of your account's billing history.

Affiliate data: if you use the referral program and request a payout, we collect the bank name, account number, and account holder name you provide for that withdrawal.

Technical data: IP address, browser type, and similar metadata collected automatically for security and abuse prevention.

3. About Your Request Content

Vikey does not store the content of your API requests. The prompts, images, and other inputs you send, and the completions you receive, pass through Vikey only to be routed to the AI model you selected and to count tokens for billing. We don't save them to our database or write them to our logs, we don't use them to train any models, and we don't sell them.

A short-lived in-memory cache may briefly hold recent prompt content (about 10 minutes, never written to disk) purely to reduce your cost when a conversation continues. It is not a permanent store and isn't reviewed by us in the normal course of operating the service.

When a request fails, we keep the technical details of the failure (such as the status, error code, and the provider's error message, plus the number of messages and request size) for 7 days so we can troubleshoot it. The conversation itself is not recorded.

On subscription plans that pick a model for you automatically, your recent messages are also sent to a third-party classification service to decide which model should handle the request. Vikey doesn't store them for this either.

Content you choose to save in Vikey, such as saved prompts and templates, and the prompts and images in your Vikey Studio history, is stored so you can access it later, until you delete it.

4. How We Use Your Information

• To operate the service: authenticate requests, enforce your balance, and route calls to the right model.
• To bill you accurately and maintain your transaction and usage history.
• To communicate with you about your account, billing, or service changes.
• To detect and prevent fraud, abuse, and violations of our Terms of Service.
• To improve the reliability and performance of the gateway itself.

5. Who We Share Information With

We share the minimum necessary information with:

• The AI model providers we route your requests to, solely to fulfill that request. These providers process your request under their own data policies, which may include retaining it for a limited time (for example, for abuse monitoring). Vikey doesn't control how they handle data, so avoid sending sensitive personal data you don't want a third party to process.
• The classification service used by automatic-routing subscription plans, solely to route that request.
• Our payment gateway partner, to process top-ups.
• Service providers who help us operate infrastructure (e.g. hosting, database), under obligations to protect your data.
• Authorities, if required by law or to protect Vikey's or others' rights and safety.

We don't sell your personal information to third parties.

6. Data Retention

We retain account and billing records for as long as your account is active and as needed to comply with legal, tax, and accounting obligations afterward. Detailed per-request usage logs are retained for a limited period; aggregated usage/billing summaries are retained as part of your permanent account history unless you request deletion and we're not legally required to keep them.

The content of your API requests and responses is not retained by Vikey (see section 3). Technical details of failed requests are deleted automatically after 7 days.

7. Your Rights

You can access and update most of your account information directly from your dashboard. You may request a copy of your data, or request that we delete your account and associated personal data (subject to what we're required to retain for legal/billing reasons), by contacting us at [email protected].

8. Security

We use industry-standard measures, including encrypted connections, hashed passwords, and access controls, to protect your information. No system is perfectly secure, so we can't guarantee absolute security, but we work to keep your data protected and will notify affected users if we become aware of a breach involving personal data.

9. Cookies & Local Storage

Our dashboard uses local storage in your browser to keep you signed in and remember lightweight preferences. We don't use third-party advertising trackers.

10. Children's Privacy

Vikey isn't intended for use by anyone under 18. We don't knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

12. Contact

Questions about this Privacy Policy? Reach us at [email protected].