Privacy Policy

This policy explains how Gnbly Inc. (Dover, Delaware, USA) ("we", "us") handles personal information when you use Half Off Dev at https://halfoff.dev, its APIs and its other services (the "Service"). For the rules of using the Service, see the Terms of Service.

What we collect#

Account information. Your email address, an optional name, a hash of your password (never the password itself), your two-factor settings, your language, your referral code and who invited you.

Payment information. When you top up, our payment provider (PayPal) processes the payment. We receive the amount, the currency, the order or transaction identifier and its status — not your card or bank details.

Usage records. For each API call: the time, the API key, the model or tool, token and result counts, the price charged, the status, timing (latency, time to first token) and error messages. These records do not include the content of your prompts or of the model's answers.

Content you send to run a request. Prompts, files and parameters pass through the Service to produce the result you asked for:

• Model API calls (text): forwarded to the model and streamed back. We don't store prompt or answer content.
• Images: generated images are kept for up to 7 days so you can download them; input images for edits are deleted when the job finishes.
• Data tools and browser agent runs: the inputs you give a run and the results it returns, kept for 90 days so you can read them again.
• Browser agent: the text of recently visited pages and screenshots while a run is active, plus the secrets, saved logins (cookies and site storage) and files you choose to store. Secrets, profiles and files are encrypted at rest and are used only for the sites you allow.
• Cloud agents: the files in each agent's workspace, kept until you delete the agent (or after a period of negative balance, as described in the documentation).

Support and verification. Messages you send to support. If you claim free credit for a post on X, the post and public facts about the X account (handle, age, follower count) needed to check it.

Device and site data. A session cookie that keeps you signed in, a cookie that remembers your language, and a few local-storage entries (such as an invite code from a link you followed, the page you first arrived on, and dismissed notices). We don't use advertising cookies or third-party trackers. Our hosting provider processes IP addresses and request metadata to deliver the site and protect it from abuse.

How we use it#

• To provide the Service: authenticate you, route and run your requests, show your logs and balance, and bill usage.
• To keep it secure: rate limiting, fraud and abuse detection (for example against fake sign-ups for free credit), and enforcing the Acceptable Use Policy.
• To communicate: verification emails, notices about your account, balance and security. We don't send marketing email without your consent.
• To improve the Service: aggregate usage statistics such as success rates and latency per model.
• To meet legal obligations: accounting, tax and responding to lawful requests.

We do not sell your personal information, and we do not use your inputs or outputs to train models.

Who processes it for us#

We share information only with service providers that process it on our behalf to run the Service, and only what they need:

• hosting, storage, email delivery and network providers;
• the companies that run the AI models, data sources, browsers and compute your requests use — they receive the content of the requests you send to them;
• our payment provider (PayPal) for top-ups.

We may also disclose information when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business (the buyer would be bound by this policy).

Where it is processed#

We and our providers operate in the United States and other countries. By using the Service you understand your information may be processed outside your country, with safeguards required by applicable law.

How long we keep it#

• Usage logs: deleted automatically about three months after the month in which the request was made.
• Data tool and browser agent runs: 90 days.
• Generated images: up to 7 days.
• Account, billing and payment records: while your account is open, and afterwards as long as needed for accounting, tax and legal obligations.
• Cloud agent workspaces, stored secrets, profiles and files: until you delete them or your account is closed.

Security#

Passwords are stored as salted hashes, two-factor authentication is available, browser secrets, profiles and files are encrypted with a per-account key, and all traffic uses HTTPS. No system is perfectly secure; tell us right away if you suspect your account or a key is compromised.

Your choices and rights#

You can see and change your account details, revoke API keys, delete stored secrets, profiles and files, and delete cloud agents in the dashboard. You can also ask us to access, correct, export or delete your personal information, or object to or restrict how we use it. Depending on where you live (for example in the EU, the UK or California), you may have these rights by law, and you can complain to your local data-protection authority. We will not treat you differently for exercising them.

To make a request, open a ticket in Support from your account. We may need to verify your identity, and we may keep information we are required to keep by law.

Children#

The Service is for developers and businesses. It is not directed to children, and we don't knowingly collect information from anyone under 16.

Changes#

We may update this policy. We will post the new version here with a new date and, for material changes, tell you by email or in the dashboard.

Contact#

Privacy questions and requests: open a ticket in Support. Gnbly Inc., Dover, Delaware, USA.