# Privacy notice

Last updated: 2026-09-28

We try to hold as little data as possible.

Aayat AI is a trading name of Faisal Aziz, a sole trader in England, UK. Contact: [hello@aayatai.com](mailto:hello@aayatai.com). For personal data, the data controller is the sole trader named above.

## What we record
- **Payments:** for each paid call we store the service, price, network, time, the paying wallet address and the
  transaction hash. Wallet addresses and transactions are already public on the blockchain. We use this for
  accounting, fraud prevention and aggregate statistics; the public [stats page](/stats) shows totals only.
- **Reliability:** for each call we store the service, whether it succeeded, the response time and whether it was
  answered from cache (no inputs, no wallet).
- **Your inputs and answers** are not stored in our database. Identical requests may be answered from a short-lived
  cache (seconds to a day, depending on the service) so they are cheaper and faster.
- **IP addresses** are used only briefly to rate-limit free traffic and are not stored by us. Our hosting provider
  (Cloudflare) processes request logs under its own privacy policy.
- **Free trial:** to count free calls we store a one-way hash of your IP address and client type with a salt that
  changes every day and is then deleted, so nothing links one day to the next and the IP itself is never stored.
- **Prepaid credits:** we store a hash of your API key (never the key itself), your balance, each top-up (amount,
  network, time, the sending wallet address and transaction hash), the price of each call paid from credits, and any
  refund request (the wallet address you give for the refund). Wallet addresses and transactions are public on the
  blockchain. We use this to run your balance, for accounting and to prevent fraud.

## What we don't do
- We don't provide data about private individuals, sell data, or use your inputs to train models.

## Third parties
- To answer a call we may send your inputs (for example a URL, a token address or a text to translate) to the data
  or AI provider that does the work (for example Cloudflare Workers AI, public blockchain APIs, UK government APIs).
  Payments are verified and settled by a payment facilitator (Coinbase CDP).

## Retention and your rights
- Payment and credits records are kept for accounting (normally 6 years); reliability logs for 30 days. Free-trial
  counters can't be linked to anyone once the day's salt is deleted.
- If you believe we hold personal data about you, email [hello@aayatai.com](mailto:hello@aayatai.com) or see the [contact page](/contact); UK GDPR rights
  (access, correction, deletion, objection) apply where relevant.