Privacy Policy

Data collected

• Account data: email, username, password hash, login time, and account status.
• API key data: key hash, prefix, status, bound models, creation time, last used time, and error status.
• Usage and billing data: model, provider, tokens, Credits usage, order ID, payment status, transactions, and request status.
• Security and diagnostic data: IP address, User-Agent, request time, error code, latency, risk events, and alerts.

API request content

• To complete model calls, prompts, messages, and related parameters are sent to the selected model channel or third-party provider.
• SuperTomorrow records necessary request metadata, usage, status, and billing fields for billing, troubleshooting, security audit, and operations.
• SuperTomorrow does not sell user API request content to third parties.

Payment data

Payment processors such as Stripe handle card details, payment authentication, and settlement. SuperTomorrow does not store full card numbers, CVC, or payment authentication credentials.

Data protection

• The full API key is shown only once at creation or regeneration. Plaintext keys are not stored by the backend.
• Passwords are stored as hashes.
• Administrative and payment-related actions are recorded in audit logs.
• Databases and backups are retained for operations and security needs. The current backup retention policy is 30 days.

Third-party services and cross-border processing

SuperTomorrow may use Stripe, Cloudflare, cloud servers, email providers, and model providers. Depending on user location, payment method, and model channel, data may be processed in different countries or regions.

Contact and requests

To request access, correction, or deletion of account-related information, contact [email protected]. For account security, identity verification may be required before processing.