Privacy
Last updated: 2026-10-26
This notice explains how the Roy account Portal and AI gateway handle personal information. It covers sign-in, linked computers, program keys, balances and payments. The desktop app, your own connected services and the AI providers you choose may handle additional information under their own notices.
Who operates Roy and how to contact us
Roy provides these account and AI gateway services. In these pages, “we” and “us” refer to Roy. For privacy requests, billing questions, refund requests or legal notices, email:
Your account and computers
We receive your email and profile names from you or your chosen sign-in provider, and keep your language, sign-in records, linked computer names and key metadata. We store access-key hashes rather than the secret keys; a new program key is shown once. If you provide billing details, we keep the billing name, company, address and tax identifier. Our servers also receive technical information such as IP addresses, request times and error details to operate and protect the service.
Why we use this information
We use this information to authenticate you, link computers, authorize AI requests, manage balances, process payments, issue invoices, send account messages, prevent abuse and resolve support or billing problems. Where applicable law requires a legal basis, these purposes rely on performing our contract with you, legal obligations, legitimate interests in running and securing the service, or consent where required. You may withdraw consent by contacting us without affecting earlier lawful processing.
Your balance and payments
We keep balances, usage charges, top-ups, invoices, billing details and automatic-refill settings. Card details pass through Roy’s payment service to the payment processor to complete your request. Saved cards are held by the processor; Roy keeps payment tokens, customer and transaction references, and display details such as brand, last four digits and expiry. Roy does not store full card numbers or security codes. Do not send card details by email.
AI requests
The AI gateway transmits your request and its included context to the AI provider selected for the model and returns the answer. It does not store or log prompt or answer text. It records operational and billing metadata, including model, usage counts, time, key reference and charge. This gateway-specific practice does not describe storage by the desktop app or AI provider. Review the selected provider’s privacy practices before sending personal, confidential or sensitive material.
Browser cookies and messages
The Portal uses cookies for sign-in, request protection, temporary sign-in navigation and your language choice. The sign-in lifetime follows the account session, currently up to seven days; the language cookie lasts one year unless you clear it. You can clear or block cookies in your browser, but sign-in and protected actions may stop working. The Portal includes no advertising trackers or third-party analytics scripts. We send sign-in codes, computer-link notifications, top-up receipts and refill-failure notices by email.
Who receives information
Information is shared as needed with your selected sign-in provider, payment processors, email and hosting providers, and the AI provider handling a request. Each receives information needed for its role; AI providers receive the content you submit for processing. We may disclose records when required by law, to protect rights or investigate fraud, or as part of a business transfer subject to applicable privacy obligations. We do not sell personal information or use it for targeted advertising. Providers may process information in the United States or other countries with different privacy laws; contact us with questions about a particular provider or transfer.
How long information is kept
Account and access records are kept while needed to provide and secure your account. Closing an account removes or clears the data described below. Financial records, invoices, revoked-key metadata and a scrubbed user record remain for accounting, tax, fraud prevention and dispute handling. These retained records currently have no automatic purge deadline. Account closure therefore does not promise deletion after a fixed number of days. Contact us to request deletion or ask about a record; we will assess the request and any legal reason for retaining it. Payment and AI providers apply their own retention rules.
Deleting your account
Delete my account first asks the payment service to remove your saved payment methods and removes current billing details. On success, all account sessions end, keys are revoked, sign-in records and user-linked pairing and one-time links are deleted, and your account email and names are cleared. A scrubbed user record, revoked key records (which may include computer or key names), balance, charges, top-ups and invoices remain. Existing invoice details and records held by a company or another service are not automatically erased.
Your privacy choices and requests
Email the contact above to request access, a portable copy, correction or deletion of your personal information, or to exercise an objection, restriction or opt-out right available where you live. You do not need a new account to make a request. Describe the request and account email; do not include a password, sign-in code, secret key or card number. We may request proportionate information to verify identity or an authorized representative. We respond within applicable legal deadlines and explain any refusal. To appeal, reply with “Privacy appeal” and your reason. We do not discriminate for exercising privacy rights. You may also complain to your local data-protection authority or the Texas Attorney General.
Children and security
These account and payment services are intended for adults, not children under 18. Contact us if you believe a child has supplied personal information. We use access controls, encrypted connections and secret-key hashing to protect the service, but no system is completely secure. Keep your credentials private and report suspected unauthorized access promptly.
Changes to this notice
We update this notice when our practices change and show the revision date above. Where applicable law requires notice or consent for a material change, we will provide it before that change takes effect. Contact us if you need an earlier version or an explanation of a change.