Privacy

Promptimizer is a BYOK router. Completions go to the providers you connect. We store the minimum needed to run routing, savings, and your account.

What we store

• Provider API keys — encrypted at rest with a server secret (AES-GCM) in Postgres when you are signed in, and encrypted again when a BYOK session is cached in Redis so ephemeral fleets stay sealed across Vercel instances. Keys are never written to browser localStorage or application logs.
• Google sign-in — if you use Google, we may link an existing password account that already uses the same verified email address.
• Prompts & routing metadata — recent prompts (truncated) and cost/quality receipts may be stored for the savings portal. Delete your account to remove provider keys and sessions; contact us for a full usage-history purge.
• Semantic cache — similar prompts may store an answer vector (Redis and/or Qdrant) scoped to your account, with TTL / invalidation on logout, disconnect, and model refresh.
• Account — email, hashed password (or Google subject), session cookies.

Email

If you create an account with email and password, we send a verification link and, if you ask, a password-reset link. Those are transactional only (no marketing).

What we send

When you use BYOK, prompts go to the base URL you configured — OpenAI, Groq, Baseten, or any other OpenAI-compatible host. We do not run a local answer simulator; completions always hit your connected providers.

Deletion

Deleting your account removes provider rows, sessions, and API keys from our database. Cached completions for your account are invalidated. Contact us if you need a full purge of usage history.