Privacy Policy

1. What we store

• Your wallet address. It is already public on Solana. We store it to identify your account.
• Your balance records. Your credit balance, and a snapshot of your $HFAI token balance together with the time it was last checked.
• Your conversations and messages, when you are signed in. The text of your messages and of the replies is stored so that you can read them again later. Anonymous free-tier chats are not saved.
• Your API keys. A key is shown to you once. We store a hash of it, plus its short prefix and its last four characters so the key can be listed back to you. The key itself is never stored.
• Your usage records. Per request: the model, the provider, the token counts, the cost and the time. This is what your balance is calculated from.
• Your top-ups. The Solana Pay reference, the amount, and the on-chain transaction signature.
• A session cookie, set when you sign in, so that you stay signed in. First-party only.
• Your IP address, used briefly to enforce the abuse limits on the free tier. It is not part of your account record.

2. What we do not collect

• No email address and no password.
• No private keys or seed phrases — they never leave your device, and we could not use them if we had them.
• No advertising or cross-site tracking, and no third-party analytics scripts on this site.

3. Cookies

We set one first-party session cookie, named hfai_session, so that you stay signed in. It is HttpOnly and Secure, and it expires after 7 days; signing out clears it. We do not use advertising or cross-site tracking cookies.

4. Who else sees your data

• A third-party inference provider receives the content of your request in order to produce the reply.
• Our infrastructure providers (hosting, database and content delivery) process data on our behalf in order to run the service.
• We do not sell personal data.

5. How long we keep it

Account and usage records are kept for as long as your account exists. Your conversations, messages, API keys and usage records are deleted along with it.

6. Your choices

• Delete any API key at any time in the app; a deleted key stops working immediately.
• Sign out to clear your session.
• Ask us to delete your account and its data in the community: t.me/HFAICommunity. There is no self-serve delete control yet, so this is handled by hand.

7. Children

HFAI Cloud is intended for adults. You must be at least 18 years old to use it. We do not knowingly hold data for anyone under 18; if you believe a minor has used the service, tell us in the community and we will remove that account.

8. Changes to this policy

If this policy changes, the effective date at the top of this page changes with it.

9. Contact

Privacy questions and deletion requests: t.me/HFAICommunity.