Draft - to be reviewed by a lawyer before launch.
This is the privacy policy for Proxen, the AI cost proxy service. It covers this website and the Proxen service. In this policy, "we" and "us" mean Proxen (a product of Surehand, surehand.io), and "you" means the person or company using the site or the service.
What we collect on this website
When you fill in a form (a call or bill review request, or the newsletter), we keep the details you give us: your name, work email, company and your message. We also collect standard web logs such as IP address, browser and pages visited, used to keep the site running and to understand how it is used.
What we collect when you use the service
For every request that goes through Proxen we log metadata: which key sent it, which model it went to, how many tokens it used, what it cost and when. This is what powers budgets, caps and the spend views your company sees.
Prompt and response bodies are not stored by default. They pass through to the provider and are not written to Proxen logs by default. A client admin can switch body logging on for their own company; if they do, bodies are stored for that company only, for the retention period they choose, and are visible only to that company's admins.
Provider accounts
Your provider keys (Anthropic, OpenAI, Google and others) are stored encrypted on the server and used only to forward your team's requests. They belong to your company. Requests are sent to those providers under your company's own accounts and are subject to each provider's terms and privacy policy.
How we use your data
To run the service, enforce budgets and caps, show usage to your company's admins, bill you, answer support requests and send the monthly email if you asked for it. We do not sell personal data and we do not use your prompts or logs to train models.
Who can see it
Your company's admins can see the metadata log for their own keys. Our staff access it only to run the service or help with a support request. We use a small number of processors (hosting, email, forms) that handle data on our behalf under contract.
How long we keep it
Request metadata is kept for the retention period agreed with your company. Form submissions are kept while we are in contact with you. When an engagement ends, we delete your keys and logs on request.
Your rights
You can ask us what personal data we hold about you, ask for a copy, ask us to correct or delete it, and unsubscribe from the monthly email at any time. Write to us and we will respond.
Contact
Questions about this policy: hello@proxen.si, or use the form at /contact-us.