Privacy Policy

1. Introduction

OpenDunes ("we", "us", "our") operates an AI API gateway service at opendunes.com. This policy describes how we collect, use, and protect your personal data in compliance with Algerian Law 18-07 on the protection of natural persons with regard to the processing of personal data.

2. Data We Collect

• Account data: Name, email address, hashed password, and authentication provider (if using OAuth).
• Billing data: Deposit amounts, transaction history, and balance. We do not store payment card numbers.
• Usage data: API request logs (model used, token counts, timestamps, response status). Request content is not stored unless you enable conversation history.
• Device data: IP address, browser type, and operating system for security and fraud prevention.

3. PII Redaction

Our PII scanner automatically detects and can redact personal identifiers (phone numbers, email addresses, national ID numbers) from API requests before they reach upstream AI providers. You can configure this behavior per API key: warn, redact, or block.

4. How We Use Your Data

• To provide and maintain the service
• To process billing and deposits in Algerian Dinars (DA)
• To enforce rate limits and prevent abuse
• To generate anonymized usage analytics
• To comply with legal obligations under Algerian law

5. Data Residency

All account data, billing records, and audit logs are stored on servers located in accordance with Algerian data residency requirements. API requests are forwarded to upstream AI providers (OpenRouter) for processing and may traverse international networks.

6. Data Retention

Account data is retained for the duration of your account. Upon account deletion, your personal data is anonymized. Financial ledger entries are retained for audit compliance. Request logs are retained for 90 days, then aggregated into anonymous statistics.

7. Your Rights

Under Law 18-07, you have the right to access, rectify, and delete your personal data. You can exercise these rights from your account settings or by contacting us. Account deletion is available in Settings > Account.

8. Contact

For privacy-related inquiries, contact us at privacy@opendunes.com.