Privacy Policy

Last updated: 12 October 2026

This policy explains how MCOCLOUD TECHNOLOGY PTE. LTD. ("Koiray", "we", "us"), a company registered in Singapore, handles information when you use the Koiray inference API (the "Service") or visit koiray.com. We aim to collect as little as possible.

1. API request content

Prompts, messages, files, tool definitions and model outputs ("Content") are processed in memory only to generate a response. We do not store Content after a request completes, we do not log it, and we never use it to train, fine-tune or evaluate models.

2. Request metadata

For billing, capacity planning and reliability, our gateway records the following for each request:

• a request identifier and timestamp
• the model requested and the HTTP status returned
• input, cached input and output token counts, and the resulting cost
• latency measurements such as time to first token

This metadata does not include Content. We keep it for 90 days, after which it is deleted or aggregated so that individual requests can no longer be identified.

3. Requests routed through OpenRouter or other platforms

When you reach Koiray through a routing platform such as OpenRouter, that platform is our customer and sends requests to us on your behalf. We do not receive your account details from the platform. The platform's own privacy policy governs the information it collects from you.

4. Business contact information

If you email us or become a direct customer, we keep your name, email address, company details and correspondence to provide the Service, send invoices and respond to you. We do not sell this information or use it for third-party advertising.

5. Website

koiray.com does not use cookies, analytics or tracking scripts. Our hosting and network provider processes standard technical data, such as IP addresses, to deliver the site and protect it from abuse.

6. Service providers

We use a small number of providers to operate the Service. They process data only to provide their services to us:

• Cloudflare: network delivery, TLS termination and website hosting. API traffic passes through Cloudflare's network in encrypted form.
• RunPod: GPU servers in Tier 3+ data centers in the United States, where models run.

Because our infrastructure is in the United States and our company is in Singapore, information may be processed outside your country. We take reasonable steps to protect it wherever it is processed.

7. Security

API traffic is encrypted in transit with TLS. Access to the Service requires an API key, and access to our infrastructure is limited to authorised personnel.

8. Your rights

Subject to applicable law, including Singapore's Personal Data Protection Act 2012, you may ask to access or correct the personal data we hold about you, or withdraw consent to its use. Because we do not store Content, there is no Content to access or delete. To make a request, email [email protected].

9. Changes

We may update this policy as the Service evolves. We will change the date above, and for material changes we will notify direct customers by email before they take effect.

10. Contact

MCOCLOUD TECHNOLOGY PTE. LTD., Singapore
[email protected]