🛡 Security & Trust

Your API keys are safe with us

We need read-only access to pull usage and cost data from your providers. Here is exactly what we access — and what we never touch.

🔒

AES-256 Encrypted

👁

Read-Only

🚫

No Inference Use

🔐 How we protect your keys

🔒

AES-256-GCM で暗号化しお保存

APIキヌはデヌタベヌスに保存される前に暗号化されたす。暗号化キヌは環境倉数にのみ存圚し、アプリケヌションコヌドには含たれたせん。

👁

読み取り専甚・モニタリング甚途のみ

䜿甚量・請求゚ンドポむントのみを呌び出したす。お客様のアカりントぞの曞き蟌み・䜜成・倉曎は䞀切行いたせん。

🚫

AIの掚論やプロンプト生成には䜿甚しない

お客様のAPIキヌは、モデルの実行・コンテンツ生成・䜿甚量デヌタ取埗以倖のクォヌタ消費には絶察に䜿甚したせん。

📋

すべおのアクセスをログずしお確認可胜

Konsumpsyがい぀キヌにアクセスしたかは、サヌビス詳现画面の「キヌアクティビティ」タブで確認できたす。

🗑

い぀でも削陀・切断可胜

サヌビスを削陀するず、キヌはただちにデヌタベヌスから消去されたす。保持・アヌカむブは行いたせん。


✅ What we access

  • ◆Daily and monthly token usage totals
  • ◆Model-level usage breakdown (e.g. GPT-4o vs GPT-4o-mini)
  • ◆Estimated API cost based on public pricing
  • ◆Organization-level aggregated usage only — never individual request content

🚫 What we never access

  • ✕Your prompts, messages, or conversation content — ever
  • ✕AI inference or generation — we never call completions or chat endpoints
  • ✕Your credit card or billing information
  • ✕Other workspaces or organizations you belong to
  • ✕Individual API call logs or request-level details

📋 Key activity log

Every time we use your key, it is logged with a timestamp, endpoint, and outcome. You can review this log anytime from the service detail page.

  • ◆Logged: timestamp, provider, endpoint, action type, success or error
  • ◆Key values are never written to logs — only metadata
  • ◆Auto-sync runs once per day at 02:00 UTC
  • ◆Manual sync available anytime on Pro and Team plans

👀 You are always in control

  • ◆Disconnect any service at any time — key is removed immediately
  • ◆Rotate or update a key anytime without losing usage history
  • ◆Request full account deletion via support

📄 Our commitments

  • ◆Keys are used only to read usage and cost data — nothing else
  • ◆Keys are never sold, shared, or transferred to any third party
  • ◆Your data belongs to you — we do not aggregate or resell it
  • ◆GDPR deletion requests fulfilled within 30 days

Questions about security?

We are transparent about everything. Reach out anytime.

Contact us →