Privacy Policy
Effective date: 4 October 2026
1. Information we collect
We collect account information you provide at registration or when we provision your account (username, email address), subscription and payment status (plan, renewal dates, amounts paid), and usage data generated when you call the API (timestamps, model names, token counts, cost). We do not store the content of your prompts or completions beyond transient processing.
2. Payment information
Subscription payments are processed by Waffo Pancake. Your payment details — card numbers, bank account numbers, e-wallet credentials — are collected and stored by Waffo Pancake under its own privacy policy. We never receive or store your full card number. We receive from Waffo Pancake only the information needed to activate and maintain your subscription: payment status, method type, amount, and transaction references.
3. How we use information
We use collected information to operate and secure the gateway, maintain your subscription, meter usage and deduct credit, prevent abuse, provide support, and improve the service. We do not sell your personal information to third parties, and we do not use your prompts or completions to train models.
4. API request data
Requests you send through the gateway are forwarded to the upstream model provider that serves the selected model. Those providers process request content under their own privacy policies. We log metadata (timestamp, model, token counts, cost, IP address) but not the bodies of prompts and completions in normal operation.
5. Cookies
We use strictly necessary cookies to keep you signed in to the dashboard and to maintain your gateway session. We do not use advertising or third-party tracking cookies.
6. Data retention
Account information is retained while your account is active. Usage logs are retained for up to 12 months for billing and abuse-prevention purposes, then deleted or anonymized. Payment transaction records are retained as required by Indonesian tax and accounting rules. If your subscription ends, your account data is kept so you can resubscribe, unless you ask us to delete it.
7. Security
We use industry-standard measures including TLS encryption in transit, hashed password storage, scoped API keys, and short-lived access tokens. No method of transmission over the internet is 100% secure, but we work to protect your information.
8. Your rights
You may request access to, correction of, or deletion of your personal data by contacting us at the address below. We will respond within a reasonable timeframe and in accordance with Indonesian data protection law (UU PDP).
9. Changes to this policy
We may update this policy from time to time. Material changes will be announced on this page with an updated effective date, or by email to the address on your account.
10. Contact
For privacy questions or requests, contact PT Transformasi Digital Cloud at riki@morphius.cloud — Perumahan Victoria Garden Blok B3, Satriamekar, Tambun Utara, Bekasi, Jawa Barat.