We never store your prompts or the answers your models give. The gateway you run does not send them to us, and of what it does send, the hosted workspace keeps only counts, costs, model names and short labels (a tag over 128 characters is not kept). It is not a setting you have to find; it is what the gateway sends.
We send account emails and nothing else: a link to confirm the address you sign up with, a link to reset your password when you ask for one, an invitation when we invite you or when a workspace's owner or admin invites you to join it, a notice to a workspace's owner about changes made to it, a note when your sign-in code is turned on or off, when a recovery code is used, or when wrong codes pause your account, and a note when your password changes, when you are removed from a workspace, when your role in one changes, or when a workspace's ownership moves. No newsletters, no marketing. Resend, the company that delivers them for us, handles each one: the address it goes to and what it says.
When you sign in, we also leave a cookie called axigate_known on that browser, so that your own browser can always ask for a password reset for your account: it holds no name or email address, only a signature and the date it was made, and it lasts 90 days, though a new password ends it.
To show you the dashboard, to hold a budget across your machines, to produce the statement you asked for, and to keep the service running. We do not sell it, we do not share it with anyone to advertise to you, and we do not use it to train anything.
Your plan decides how far back the dashboard looks — 14 days on the free hosted plan, longer on a paid one. That is a window on what you can see, not a deletion: records are not deleted when the window shortens, and a longer plan shows them again.
If you are removed from your last workspace, or leave it, your account stays as it is — your name, address, password hash, sign-in code and the record of what you did in the workspaces you were in — until you ask us to delete it: write to us from the account's own address.
Saved statements are locked for 30 days. The copy of a month's statement we save when you close the month is locked against any change or deletion for 30 days after it is saved: nobody can change or delete it in that time, including us. The one exception is the owner of our storage account, who can lift a lock early, and only for a legal or safety reason, such as removing a secret that was pasted into a label. When we move older records out of the live database (a day at a time, into the same storage), each archived day is locked the same way for 30 days after it is moved. After the 30 days either can be deleted like anything else.
Ask us to delete your workspace and we will delete it for good: the accounts of everyone whose only workspace it was (each person's name, email address, password hash, sign-in code and recovery codes, every sign-in of theirs, the links we emailed them and the invitations sent to their address) — anyone who belongs to another workspace keeps their account and loses only their place in this one — the workspace's push keys, every sign-in that was looking at it, the invitations it sent, its activity record, its plan, every record and closed month, and every stored statement and archive. Everything goes at once, except a saved statement or archived day still inside its 30 days, which goes as soon as its 30 days end; you do not have to ask again. What stays is what our admin record says about the workspace, because that record is never edited: each plan we gave it, each password reset, each invitation (by the part of the address after the @ only), and the deletion itself and when it happened. None of those lines holds an email address. Our database's automatic backups are not edited; the copy in each one goes when that backup expires. Write to axigatelabs@gmail.com and say so; we will confirm when it is done.
The company that runs the servers we rent, Resend, which delivers the account emails above, and — when paid plans open — the company that takes the payment. Nobody else. We will name them here before that changes.
None of this applies to the app you run yourself, because it does not send us anything. It keeps its records on your machine, under its own licence, whether or not you ever have an account here.
Questions, corrections, or a deletion request: axigatelabs@gmail.com.