LEGAL

Privacy Policy

What we collect, what we do not, and what reaches the model provider.

This is a translation. The Persian text at 1xai.ir/privacy is the binding version. Where the two differ, the Persian governs.

[01]PRIVACY · 01

What we collect

We collect only what running the service and issuing a bill requires.

Email address: For authentication and sign-in links. Your email is never sent to the model provider.
Usage metadata: Per successful request: model name, input and output token counts, response status and a timestamp. This is what renders your usage in the dashboard.
Request excerpts: For developer debugging, a limited excerpt of the request and response body is kept in that account's own private log. It is shown only to the authenticated owner, and file-based routes such as audio upload stay metadata-only.
Payment: The transaction id and amount come back from Zarinpal. No card data is stored on our servers — payment is processed entirely inside the gateway.

[02]PRIVACY · 02

What we deliberately do not store

These are never written to any database and never sent to the provider. We pass them through as a proxy and nothing more:

Audio files sent to Whisper.
Images sent to vision models or generated by image models.
The requester's IP address — never written to our logs.
Advertising or tracking cookies.

Your identity never reaches the model provider. That is the core of what this proxy is for: requests leave from our Iranian servers, not from you.

[03]PRIVACY · 03

How the data is used

Collected data is used for exactly two things:

Billing: Usage metadata computes the cost of each request and deducts it from the account balance.
Your own reporting: Recent calls — model, tokens spent, Toman cost — are shown on your usage page.

It is not used for advertising, profiling, machine learning, or any other purpose.

[04]PRIVACY · 04

Third parties

We do not sell user data to anyone. There are exactly two recipients:

Zarinpal (payments): Only the transaction amount is sent. No email, no API key, no usage history. Their privacy policy governs what they do with it.
The model provider: The proxy forwards each request to OpenAI, Anthropic, Google or DeepSeek depending on the model name. What goes is the content of your API request and nothing identifying you. The provider then processes it under its own policy.

[05]PRIVACY · 05

Retention and deletion

Usage metadata: Kept for 1 year from the time it was recorded, then deleted automatically.
Email address: Kept until you request account deletion.

You can request deletion of your account and a refund of any remaining balance at any time through the contact form. The terms that govern the account are in the Terms of Service.