Privacy Policy
Last updated November 3, 2026
Information we collect
- Account. Your email address, your name if you give one, a hash of your password (or the identifier Google gives us if you sign in with Google), and the one-time codes we email you to verify your address or reset a password.
- API keys. A prefix and a hash of each key, its name and when it was last used. We cannot show you a key again after it is created.
- Billing. Your balance and the history of top-ups, refunds, disputes and charges. Card details are entered with Stripe and never reach our servers.
- Usage. For each API request: your user and key, the model, token counts, the amount charged and the time. Not the content of the request, unless you ask for it (next item).
- Request content (optional, off by default).If you turn on “Store prompts and completions” for one of your keys, we keep the prompt and the completion of the share of that key's requests you choose, for a few days (3 by default), so you can read them on the Request logs page, and then delete them. We do not use them for anything else.
- Infrastructure you use. The SSH public keys you add, the GPU clusters and machines you create, and the storage volumes you create and what you put in them.
- Votes and feedback. Votes you cast in the video arena, and what you send us by email.
- Technical data. IP address, browser, pages requested and timestamps, in our server logs.
How we use it
- To provide the service: sign you in, authenticate API calls, run your workloads and bill for them.
- To keep it safe: rate limiting, fraud and abuse prevention, investigating incidents.
- To communicate: verification codes, billing alerts, service notices and replies to your messages.
- To understand how the site is used and to improve it.
We do not sell your personal information.
Where it comes from
From you, when you register, use the Service or write to us; from Google, if you sign in with it; from Stripe, which confirms your payments and disputes; and from your browser and our servers, automatically.
Why we may use it (legal bases)
Where the GDPR or UK GDPR applies: to perform our contract with you (account, API access, billing); for our legitimate interests in security, abuse prevention, understanding use of the site and improving the Service; to meet legal duties; and, where we ask for it, with your consent, which you can withdraw at any time. We send service emails only. We do not currently send marketing email, and if that changes you will be able to opt out.
Who we share it with
Only with the companies that help us run the service, for that purpose:
- Stripe, for payments.
- SendGrid, to send our emails.
- Google, if you choose to sign in with Google.
We may also disclose information where the law requires it, or to protect our users and our service. Our systems hold no prompts or outputs from the language model API to disclose.
Cookies and local storage
We use a cookie to keep you signed in. Your browser also stores your theme choice and, if you use the playground, the API key you typed there, in local storage on your device only. The OpenAI Ads pixel mentioned above may set its own cookies.
How long we keep it
- Account data until you ask us to delete your account.
- Billing and usage records for as long as we need them for accounting, tax and dispute handling.
- Server logs for a limited time for security and debugging.
- Content you store in storage volumes until you delete it.
- Prompts and outputs of the language model API: not kept.
Selling and advertising
We do not sell your personal information. We measure our advertising with OpenAI Ads: a pixel on our pages records visits to them, and when you complete sign-up our servers send OpenAI one event saying so, with an identifier derived from your account ID and the page address. It carries no email address, prompts or outputs. We do not use the content of your prompts or outputs for advertising, because we do not keep them.
Your choices and rights
You can ask us to access, correct or delete the personal information we hold about you, or to close your account, by writing to contact@zeus.rocks. We verify your identity before acting on a request. Deleting an account removes your keys and personal data; we keep the billing records that the law or an open dispute requires us to keep.
- EU and UK. You have the right to be informed, to access, correct, erase and restrict the use of your data, to receive it in a portable form, to object to its use (including for direct marketing), and not to be subject to a decision based solely on automated processing with significant effects. You can complain to your data protection authority.
- California. You have the right to know, access, delete and correct your personal information, and not to be treated worse for using those rights. We do not sell or share personal information for cross-context behavioral advertising, except that the OpenAI Ads measurement described above may count as such sharing under California law; write to us to opt out.
- Do Not Track. We do not respond to Do Not Track signals.
Where it is processed
Our servers and our language model provider are in the United States. If you use the service from elsewhere, your information is transferred to and processed there. Where the GDPR or UK GDPR applies to such a transfer, we rely on appropriate safeguards such as the Standard Contractual Clauses and the UK Addendum.
Security
Passwords and API keys are stored only as hashes. Traffic to our site and API is encrypted in transit. No system is perfectly secure, so keep your API keys private.
Children
The service is not for anyone under 18, and we do not knowingly collect information from them.
Changes
If we change this policy we will update the date above, and tell account holders by email when the change is material.