Hisoka is an OpenAI-compatible LLM gateway. This policy explains what we store when you use it.
What we collect
- Account data — name, email address, hashed password, and account status.
- API keys — the key you generate is stored as a hash. The plaintext is shown once at creation and cannot be recovered.
- Request metadata — model name, prompt and completion token counts, latency, HTTP status, and timestamp for every call.
- Balance ledger — top-ups and per-request token spend.
What we do not collect
We do not build advertising profiles and we do not sell data. Prompt and completion content is not retained beyond what is needed to return the response, unless you explicitly enable logging for a key.
Why we process it
To authenticate you, route your request to the upstream model, meter token usage against your balance, show you usage analytics, and detect abuse.
Who else sees it
Requests are forwarded to the upstream model provider you select. Their handling of the content is governed by their own terms. Payment processing is handled by the gateway you choose at checkout; we never store full card numbers.
Retention
Request logs are retained so you can audit your own spend. Delete your account and the associated logs, keys, and ledger entries are removed.
Your rights
You can access, export, correct, or delete your data from the dashboard, or by contacting support. If you are in the EEA or UK, you may also object to processing or request portability.
Contact
Questions about this policy: support@hisoka.net.