Skip to content

Privacy Policy

Last updated: January 2026

CoffeeVibeAI is committed to protecting your privacy. This policy describes what we collect, how we use it, and how we protect it while you use the service.

1. Data We Collect

Account information:

  • Email address at signup.
  • Your CoffeeVibeAI API keys and their configuration (quota, rate limits, expiry) — keys are stored hashed, never in plaintext.
  • Name and contact details, if you provide them.

Service usage data:

  • Token counts and cost per request, used to meter your account balance.
  • Request timestamps and counts (not content).
  • Model used and response latency.
  • IP address and basic technical metadata.

Data we do NOT collect:

  • The content of prompts you send through the gateway.
  • The content of AI model responses.
  • Personal data belonging to end users of your own application.

2. How We Use Data

We use the data we collect to:

  • Operate and improve the service.
  • Route your requests to the appropriate upstream model and meter usage against your balance.
  • Detect and prevent fraud or abuse of the gateway.
  • Communicate about the service, security updates, and policy changes.
  • Analyze infrastructure performance in aggregated, anonymized form.

We do not use your data to train AI models.

3. Data Storage

Data is stored on cloud infrastructure meeting ISO 27001 security standards.

  • Account data: retained for the life of the account and 12 months after deletion, for accounting purposes.
  • Usage logs: retained for 90 days for debugging and dispute resolution.
  • Prompt/response content: never persisted — proxied in memory only.

All stored data is encrypted at rest (AES-256) and in transit (TLS 1.3).

4. Sharing with Third Parties

We share the minimum data necessary with:

  • Model providers: your request content is forwarded upstream to serve your request (e.g. to Anthropic, OpenAI, or Google infrastructure we route to) but is not stored by CoffeeVibeAI.
  • Payment processors: card, Alipay, or WeChat Pay providers, to process account top-ups.
  • Infrastructure providers: hosting and CDN required to run the service.

We do not sell your data to any third party for marketing purposes.

We may disclose data if legally required to by a valid request from a competent authority.

5. Your Rights

You have the right to:

  • Access: request a copy of the personal data we hold about you.
  • Correct: update inaccurate information via the Dashboard or email.
  • Delete: request deletion of your account and associated data (excluding data required by law for accounting).
  • Export: receive your usage data in a portable format (CSV/JSON).
  • Opt out: unsubscribe from marketing email at any time.

To exercise these rights, contact privacy@coffeevibeai.com or use the Dashboard.

6. Cookies

The website uses cookies necessary for:

  • Maintaining your login session (cleared when you close the browser).
  • CSRF protection.
  • Storing your preferences (theme).

We do not use third-party tracking or advertising cookies.

7. Contact

Questions about this Privacy Policy or exercising your rights:

  • Email: privacy@coffeevibeai.com
  • Dashboard: Open a support ticket
  • Response time: within 72 business hours.
1. Data We Collect 2. How We Use Data 3. Data Storage 4. Sharing with Third Parties 5. Your Rights
Terms of Service Our Commitment