Privacy Policy

1. What we collect

• Account data: your email address and a hashed password (raw passwords are never stored).
• Project and key metadata: project names, and API key hashes/prefixes. Raw API keys are shown once at creation/rotation and are not retained afterward.
• Usage metrics: daily connection and message counts and peak concurrent connections per project, used for the usage dashboard.

What we do not collect: message payloads sent through the Service are relayed to subscribed connections and not persisted afterward. The Service does not inspect or log payload content.

2. How we use it

Account and project data is used to operate the Service: authenticate you, scope API keys to your projects, enforce rate limits, and display usage in the dashboard. We do not sell personal data.

3. Where it's stored

Account, project, and key data is stored in a Postgres database. Connection state and usage counters are stored in AWS DynamoDB during active use and rolled up periodically. Infrastructure runs on AWS and, for the dashboard application, Vercel.

4. Retention

Account and project data is retained until you delete your project or account. Deleting a project removes its API keys and usage history. Live connection records expire automatically (TTL) shortly after a connection ends.

5. Your choices

You can delete a project (and its associated keys and usage data) at any time from the dashboard. To delete your account entirely, contact the account owner.

6. Changes to this policy

This policy may be updated from time to time. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

7. Contact

Questions about this policy can be sent to the account owner.