Privacy Policy

Account Information

• Email address (required for registration)
• Name (optional)
• OAuth profile data (if you sign in with Google or Discord)
• Payment information (processed by Stripe; we do not store card numbers)

Usage Data

• API call metadata: model used, token counts, cost, latency, timestamp
• IP address (for rate limiting and fraud prevention)
• Browser/device information (standard web analytics)

What We Do NOT Collect

• We do not store your prompts or API responses. Request content is forwarded to upstream providers and not retained by Dragonfly.
• We do not sell or share personal data with advertisers.

• Provide and improve the service
• Process payments and track usage
• Send transactional emails (verification, low balance alerts, welcome sequence)
• Prevent fraud, abuse, and unauthorized access
• Generate aggregated, anonymized analytics

• Upstream AI Providers — Your API request content is forwarded to the relevant model provider (e.g., DeepSeek, Moonshot). Their privacy policies apply to that content.
• Payment Processors — Stripe and OxaPay process payments. We do not store payment card details.
• Email Service — Resend delivers transactional emails.
• Cloudflare — Provides CDN, DDoS protection, and DNS.
• Law Enforcement — Only if legally required.

• Account data: retained while your account is active
• Usage logs: retained for 90 days for billing and analytics
• API content (prompts/responses): not retained
• You may request account deletion at any time

• All data in transit is encrypted via HTTPS/TLS
• API keys are hashed at rest
• Database access is restricted to localhost
• We use Cloudflare for DDoS protection
• Regular security audits and monitoring

• Authentication token — stored in localStorage, not cookies
• Cloudflare cookies — for security and performance
• We do not use advertising or tracking cookies

• Access your data via the Dashboard
• Export your usage data
• Delete your account and associated data
• Opt out of non-essential emails