Drex Privacy Notice

• Account details: your email address, and your name if you sign in with Google.
• Billing details: the amount and time of each purchase and your Stripe customer reference. Stripe processes your card; we never see or store card numbers.
• Usage records: for each successful request, the time, input and output token counts, cost, response time, request ID and which API key was used.
• Operational logs: for each request, its outcome, timings, the client's user agent and its request content. Our hosting provider also processes IP addresses to deliver traffic and block attacks.
• Request content: the state and questions you send and the answers Drex returns. We write them to our operational logs and use them only to run, debug and secure Drex and to answer support requests. Very large requests are logged in part. Drex does not use request content to train or improve models.

To run your account and the API, bill you and show your usage, keep the service secure and prevent abuse (including sign-in bot checks and rate limits), answer support requests and send service emails such as sign-in codes. We do not sell personal information and do not use it for advertising.

These providers process data on our behalf to run Drex. Data is processed in the United States.

• Account details and usage records: while your account is open.
• Purchase records: as long as tax and accounting law requires, even after an account is closed.
• Operational logs, including request content: no more than 30 days.
• Rate-limit counters: a few minutes.

We use only the cookies needed to keep you signed in. Cloudflare Turnstile may use its own cookies for the bot check on the sign-in form. We do not use analytics or advertising cookies.

You can ask to access, correct, export or delete your personal information by emailing support@nace.ai from your account email. We respond within 30 days. Depending on where you live, laws such as the GDPR or CCPA may give you further rights, which you can exercise the same way.

API keys are stored only as hashes, traffic is encrypted in transit, and access to production systems is limited to the people who run them. No system is perfectly secure, so please tell us at support@nace.ai if you find a problem.

Drex is not intended for anyone under 18, and we do not knowingly collect their information.

We will update the date above when this notice changes and tell account holders by email about material changes. Questions: support@nace.ai. See also the Drex Service Terms.