Overview
ProjectCOZY collects the information needed to operate your account, provide access to the frontier models we route, process payments, and secure sign-in. We collect what the service requires to function and nothing beyond it.
This policy covers the ProjectCOZY website, the dashboard, and the API gateway. It does not cover the upstream model providers your requests are routed to, who operate under their own terms.
Data we store
For email accounts we store your email address, name, a hash of your password, billing records, API key metadata, and usage history. We never store your password itself, and we never store your raw API key: only a SHA-256 hash of it, which is why a key can be shown to you exactly once.
For Telegram or Google sign-in we store the account identifier and profile details those providers return, which is the minimum needed to recognise you on your next visit.
Usage history means request counts, token totals, and which model alias was called. It is what powers the analytics in your dashboard.
Prompts and completions
Your prompts and the responses returned to you pass through the gateway in order to reach the model provider. We log metadata about each request, such as timing, model, and token counts, so that usage can be reported to you accurately.
Requests are routed to upstream providers to be served. Those providers process the content of your prompts under their own policies, and you should review them if you intend to send sensitive or regulated data through any AI API, ours included.
Third-party services
We rely on Binance Pay for billing, a transactional email provider for account mail, Google and Telegram for optional sign-in, and standard infrastructure providers for hosting, databases, and caching.
Each receives only the data required for its function. The payment provider, for example, sees the transaction but not your prompts or your API key.
Our home page embeds a Discord server widget. Loading that page contacts Discord to render it, which means Discord can see the request and set its own cookies under their policy. Nothing about your ProjectCOZY account is sent to them, and the widget is not present on the dashboard or any authenticated page.
How we use your data
We do not sell your personal information, and we do not share it with third parties for marketing. Data is used to operate ProjectCOZY, to prevent abuse and fraud, to support you when you contact us, and to meet legal obligations.
Aggregate, non-identifying figures such as total requests served may be used to describe the service publicly. Nothing that identifies you or reveals your prompt content is used this way.
Retention and your control
Account and billing records are kept while your account exists and for as long afterwards as tax and accounting rules require. Usage logs are retained to power your dashboard analytics.
You can revoke and regenerate your API key at any time from the dashboard, which immediately invalidates the previous key. To request account deletion or a copy of the data we hold about you, contact us through the channels below.
Contact
For privacy questions, data requests, or account help, reach us on Discord at discord.gg/dmTDB6wAmQ. We aim to respond within a few days, and sooner for anything affecting access to your account.