- Billing records
- 7 years, as tax and accounting law requires, de-identified (no longer linked to your account).
- Audit logs
- Up to 1 year from when each entry was created, then deleted.
- Usage-metering records
- Token counts, model names, and costs, with no task content: unlinked from your account and deleted within 1 year of creation.
- Promotional-credit fingerprint
- An irreversible hash of your email address, so one-time promotional credits stay one per person. It cannot be turned back into your email address.
- Aggregated, anonymized statistics
- Kept in a form that cannot identify you.