Privacy Policy

Who we are

PsiGuard is operated by PsiCo, LLC. PsiGuard is a structural monitor for AI model output, available through our website and API. PsiGuard is currently offered as a beta service. If you have any questions about this policy or your information, contact us at admin@psiguard.net.

Information we collect

We collect the following categories of information:

Account information

When you create an account we collect your email address and a display name. If you sign in with Google, we also receive your Google profile name and photo. Sign-in is handled through Firebase Authentication.

Prompts, responses, and monitoring data

To provide the Service, we process the prompts you submit and the responses generated for you. We keep activity records associated with your account that include this content along with the monitoring signals and decisions PsiGuard produces for each turn. Separately, when you call the API, conversation history you supply with a request is used to generate that turn and is not retained by the API as conversation state.

API keys

When you create a PsiGuard API key, we show you the full key once and store only a one-way fingerprint (SHA-256 hash) of it, never the key itself. We retain a short non-secret prefix so you can tell your keys apart.

Your AI provider keys (optional)

If you choose to bring your own AI provider key (for example, OpenAI or Anthropic), we store it encrypted at rest and use it only to make model requests on your behalf.

Billing information

Payments are processed by Stripe. We do not collect or store your full payment card number; Stripe handles card data directly. We receive limited billing details such as your plan, subscription status, and the information Stripe returns to us.

Technical information

Like most online services, our servers automatically record technical data such as IP address, timestamps, and request metadata for security, debugging, and abuse prevention.

How we use information

• To provide, operate, and maintain the Service, including generating and monitoring responses.
• To authenticate you and keep your account secure.
• To meter usage and process billing.
• To prevent abuse, fraud, and violations of our Terms.
• To respond to your support requests.
• To understand and improve how the Service performs.
• To comply with legal obligations and enforce our agreements.

How responses are generated

PsiGuard guards a language model. It does not replace one. To produce a guarded answer, the prompt and conversation context for a turn are sent to the AI model provider configured for your account. Depending on your configuration, that provider may be OpenAI, Anthropic, Google, DeepSeek, or xAI. Each provider processes that data under its own terms and privacy policy. If you bring your own provider key, requests are made on your own provider account.

PsiGuard's own internal monitoring signals are produced and kept on our servers; the API returns only the answer and a coarse protection indicator, and does not expose those internal signals.

Service providers

We rely on a small set of trusted providers to run the Service. Each processes information only as needed to provide their function:

• Render: application hosting and storage.
• Google Firebase / Firestore: authentication and database.
• Stripe: payment processing.
• Resend: transactional email (for example, your welcome email).
• Cloudflare: DNS, content delivery, and network security.
• AI model providers (OpenAI, Anthropic, Google, DeepSeek, xAI): response generation, as described above.

We do not sell your personal information.

Cookies & sessions

We use essential cookies and similar technologies to keep you signed in and to secure the Service. We do not use advertising cookies.

Data retention

Activity records for turns sent through the PsiGuard API (the prompts, the responses, and the monitoring results) are kept for 90 days and then deleted automatically. We retain your account information and other activity records for as long as your account is active and as needed to provide the Service, meet legal and accounting obligations, resolve disputes, and enforce our agreements. You may ask us to delete your account and associated data as described below; some records may be retained where the law requires it.

Your choices & rights

You can update your display name at any time from your account settings, and create or revoke API keys from your API keys page. Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To make a request, email admin@psiguard.net; we will respond as required by applicable law. We will not discriminate against you for exercising these rights.

Security

We take reasonable measures to protect your information, including transport encryption (HTTPS), one-way hashing of API keys, and at-rest encryption of stored provider keys. You can read more on our Security page. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

The Service is not directed to children, and we do not knowingly collect personal information from anyone under the age required to consent in their jurisdiction. If you believe a child has provided us information, contact us and we will delete it.

International users

We operate the Service using providers whose infrastructure may be located in the United States and other countries. By using the Service, you understand that your information may be processed and stored in locations outside your own. Where required, we rely on appropriate safeguards for such transfers.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above, and for material changes we will provide a more prominent notice where appropriate.

Contact

Questions about this policy or your information? Contact PsiCo, LLC at admin@psiguard.net.