Privacy policy

• Account data: your name, email address, and either a password hash or your Google account identifier if you sign in with Google.
• Content: the prompts, files, and conversations you submit and the responses generated for you.
• Long-term memories: short facts or preferences derived from your conversations, if memory is enabled.
• Usage data: per-request metadata such as time, model, token counts, cost, latency, status, and API key used.
• Technical data: IP address and browser user agent for sessions, security, and abuse prevention.

• To provide the service: generate responses, keep conversation history, and personalize answers with memories you allow.
• To meter usage, apply plan limits, and maintain your credit balance and billing records.
• To secure the service: authenticate you, detect abuse, enforce rate limits, and investigate incidents.
• To operate and improve reliability (for example, monitoring error rates and latency).

We do not sell your personal information, and we do not use your content to train our own models.

Alpha Codec is operated by SciFy Technology on top of third-party foundation models. To generate a response, your prompt, conversation context, attached files, and relevant memories are sent to the model provider configured for the model you use. At present, Alpha Codec models are served through the Google Gemini API (Google LLC), using a paid service tier. Google processes this data under its own terms as our service provider; see the Gemini API Additional Terms of Service. We may add or change providers; this section will be updated when we do.

Conversations are stored so you can return to them. Long-term memory stores brief, durable facts (for example, a preferred programming language). It is designed not to store passwords, API keys, payment card numbers, government ID numbers, or contact details. You can review, approve, or delete memories, or turn memory off, in your dashboard. Memories are only ever used for your own account.

We share information only with: the model providers described above; infrastructure providers that host the service; and authorities where required by law. Administrators at SciFy Technology can access account and usage records to operate and support the service.

We keep account data while your account is active. Deleted conversations, files, and memories are removed from the product immediately and purged from storage on a rolling schedule; uploaded file contents are deleted within 30 days. Usage and billing records are kept as long as needed for accounting and legal obligations.

Traffic is encrypted with TLS. Passwords are hashed with Argon2id, API keys are stored only as keyed hashes, and provider credentials are encrypted at rest. Access to each account's data is isolated and administrative actions are audit-logged.

You can access and update your profile, delete conversations, manage memories, revoke API keys, and sign out of sessions. Depending on where you live, you may have rights to access, correct, delete, or port your personal data, or to object to processing. To exercise them, contact us.

For privacy questions or requests, contact SciFy Technology through the contact details published at scify-tech.com.