Privacy policy

What we collect

• Account. Name, email address, organization, and the Clerk user id we use to recognize you. If you use the demo password, we store a hash of that password, not the password itself.
• Sign-in. Email, magic link, and Google sign-in run through Clerk. If you choose Google, we receive the name and email address you approve on Google’s consent screen. We do not receive your Google password, and we do not use Google data for advertising.
• Workspace. Credits, membership, role, and which desk (personal or company) is active.
• API keys. We show the full key once. After that we keep a hash and a short prefix.
• Usage. Model called, token counts, price, time, and the workspace that made the call.
• Ledger. Billable events are written to Litheum. A demo hash-chain may stand in for the live rail. Those records can include the account email so a receipt can be traced.
• Technical logs. Our hosts (Vercel for the site, Railway for the API) record ordinary request data such as IP address, browser, and timestamps.

Why we use it

We use this information to create your account, sign you in, meter calls, apply access gates, keep credits and keys on the right workspace, write receipts, secure the service, and answer support mail. We do not sell personal information.

Who we share it with

• Clerk, to authenticate you and, if you use them, your organization membership.
• Google, only if you choose Google sign-in. Google’s own policy applies to that step.
• Vercel and Railway, which host the website and the API.
• Litheum, for settlement records of billable usage.
• A model host, to the extent a call needs it: the listing you invoked and the metered result. We do not give hosts your raw API key.

We also share information if the law requires it, or to stop abuse of the gateway.

Cookies

Clerk sets the cookies that keep a signed-in session. The demo walkthrough uses a separate session cookie named mg_session. We do not use these cookies to follow you around other sites.

How long we keep it

We keep account and usage records while the account exists and as long as we need them for security, billing, and the ledger. Receipts already written to the chain stay there so the chain remains consistent. Email greg@opsfi.co if you want your account closed.

Children

Cautus Intelligence is not for children, and we do not knowingly collect their information.

Changes

If this policy changes, we will update this page and the date at the top. The current version is the one at cautusintelligence.com/privacy.

Contact

Operations.Finance Ltd (OpsFi)
Email: greg@opsfi.co