Privacy Policy

1. Introduction

IBYOK ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you sign in with GitHub, we collect your GitHub user ID, username, email address, and avatar URL. This information is used to create and manage your account.

API Keys

We store the API keys you provide for various LLM providers. These keys are encrypted using AWS KMS before storage and are never stored in plaintext.

Usage Data

We collect information about how you use our service, including API call counts, timestamps, and feature usage. This helps us improve our service and enforce usage limits.

3. How We Use Your Information

• To provide and maintain our service
• To authenticate your identity and manage your account
• To securely store and retrieve your API keys
• To track usage and enforce billing limits
• To communicate with you about service updates
• To detect and prevent fraud or abuse

4. Data Security

We implement industry-standard security measures to protect your data:

• All API keys are encrypted using AWS KMS before storage
• All data is transmitted over TLS 1.3 encrypted connections
• Access tokens are hashed before storage
• We use AWS infrastructure with VPC isolation and security groups
• Regular security audits and monitoring

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your consent
• To comply with legal obligations
• To protect our rights and prevent fraud
• With service providers who assist in operating our service (under strict confidentiality agreements)

6. Data Retention

We retain your account information and API keys for as long as your account is active. You can delete your API keys at any time through the dashboard. If you wish to delete your account entirely, please contact us.

7. Your Rights

Depending on your location, you may have the following rights:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data
• Object to data processing

8. Cookies

We use essential cookies to maintain your session and authentication state. We do not use tracking cookies or third-party analytics cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please visit our Contact page.