Privacy Policy

1. Who we are

DeTars (“DeTars”, “we”, “us” or “our”) is responsible for the personal data described in this Privacy Policy. This policy applies to the DeTars app, DeTars accounts, DeTars credits, the official-model service and this website (together, the “Services”). You can contact us at support@detars.xyz.

2. Data that stays on your device

The DeTars app runs on your computer. Your conversations, the memory the app builds and the files it works with are stored on your own disk, and new memories require your confirmation before they are saved. You may delete them from your device at any time.

Two kinds of data leave your device. When the app sends a request to an AI model, the content of that request is sent to the model’s provider (see section 4). If you communicate with DeTars through a chat app such as Telegram, Slack, Feishu or WeChat, those messages pass through that app’s service and are subject to its own privacy policy.

3. Data we process on our servers

• Account data from Google sign-in: your email address, your name and your account identifier.
• Device data: a device identifier and the device’s public key, used to verify that requests are signed by your device, together with basic details the app reports when a device is registered (such as the device name, operating system and version, and processor type).
• Usage records for the official models: the timestamp, model, token counts and credits charged for each request.
• Order and payment records: order ID, pack, amount and status. We never receive or store your full card number. Paddle’s payment notifications, which we retain with the order, may include limited details such as the card type, the last four digits and expiry date of the card, and the cardholder name.
• Support communications: emails you send us, and our replies.

We use this data to provide your account, verify devices, operate and bill the official models, process orders and refunds, prevent fraud and abuse, and respond to support requests.

4. Your prompts and responses

When you use DeTars’s official models, we do not store the content of your prompts or responses in our databases. They pass through our gateway to OpenRouter and the underlying model provider to generate the response, under those providers’ policies.

Like most online services, we keep operational and security logs to run, secure and troubleshoot the Services. These logs may incidentally contain limited portions of request or response data, for example when a provider returns an error. We keep logs only for as long as needed for these purposes.

To help OpenRouter prevent abuse, we send it a pseudonymous identifier derived from your account, never your email address or name.

If you use your own API keys instead, your requests go to the provider you configured, under your agreement with that provider. Those requests do not use DeTars credits or our official-model gateway.

5. Payments

Paddle is the Merchant of Record for DeTars credits. Paddle collects your payment details, email address and billing information at checkout and processes them under its own privacy policy. We tell Paddle which DeTars account an order belongs to, using an internal account ID, and Paddle notifies us when an order is paid, refunded or charged back.

6. This website

This website uses no analytics and no tracking cookies. It is hosted on GitHub Pages, which may log technical data such as your IP address in order to serve and protect the site. Pages load fonts from Google Fonts, so your browser requests them from Google’s servers. The checkout page at /pay loads Paddle’s checkout, which sets its own cookies.

7. Service providers and disclosures

We use the following service providers to operate the Services. We share personal data with them only as needed to provide the Services, subject to their terms and data protection commitments.

• Cloudflare: hosting and infrastructure for our servers, gateway and databases.
• Auth0 (Okta): sign-in.
• Google: sign-in.
• Paddle: payments, as Merchant of Record.
• OpenRouter and the model providers it routes to: generating responses from the official models.
• GitHub Pages: hosting this website.

These providers may process personal data in countries other than your own, including the United States. We may also disclose personal data where required by law, or to protect DeTars and its users from fraud or abuse.

8. Legal bases

If the GDPR or the UK GDPR applies to you, we rely on the following legal bases to process your personal data:

• Performance of our contract with you: to provide your account, your credits and the official models.
• Legitimate interests: to secure the Services, prevent fraud and abuse, and improve the Services using operational data, not your conversations.
• Legal obligations: to keep tax and accounting records.
• Consent: where we ask for it. You may withdraw your consent at any time.

9. Data retention

• Account and device data: for as long as your account exists.
• Order and payment records: for as long as tax and accounting law requires.
• Usage records: for as long as we need them for billing and support.
• Operational and security logs: only for as long as needed to run, secure and troubleshoot the Services.

10. Your rights

Depending on where you live, laws such as the GDPR, the UK GDPR and the CCPA give you rights over your personal data, including the right to access, correct or delete it, to receive a copy of it, and to object to or restrict its processing. To exercise these rights, email support@detars.xyz, preferably from the address you sign in with. We may need to verify your identity, and we will respond within the time required by law. If your account is deleted, we will continue to retain order records for as long as the law requires. You also have the right to lodge a complaint with your local data protection authority.

11. No sale of personal data

We do not sell personal data, and we do not share personal data for advertising purposes.

12. Children

The Services are intended for people aged 16 and over and are not directed at children. If you believe that a child has provided us with personal data, please contact support@detars.xyz and we will delete it.

13. Security

We use reasonable technical and organizational measures designed to protect personal data. Connections to our services are encrypted, each device proves its identity with its own key, and access to our systems is restricted. However, no method of transmission or storage is completely secure. Where the law requires, we will notify you of a personal data breach that affects you.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new date at the top. If a change is material, we will give you notice by reasonable means, such as by email or in the app.

15. Contact

Questions about this Privacy Policy or our handling of personal data can be sent to support@detars.xyz.