FLONNO / PRIVACY

Privacy notice

This notice describes the data used by the Flonno API service and its account dashboard.

Who is responsible

For this website, the publisher is Jonas Boos. Postal address: Route de Saint-Cergue 24Bis, PMB 133, 1260 Nyon, Switzerland.

Accounts and API keys

Clerk provides sign-in and account management and may process account information and necessary authentication cookies. When you create a Flonno API key, the full token is shown once. Flonno stores a one-way SHA-256 hash for authentication, together with the key name, permissions, allowed models, creation time, expiry, and last-use time.

Model requests

When an external client sends a request to a Flonno endpoint, the service authenticates the Flonno token and forwards the permitted request to SayGM using the provider credential configured by the service operator. Prompts and model responses are processed to complete the request but are not included in Flonno’s API access logs. SayGM processes requests under its own terms and privacy notice.

API access logs

For each request authenticated with a known Flonno key, the service may store the key name and prefix, endpoint, model, request time, source IP address and the proxy header it came from, user-agent, HTTP status, duration, and token counts when the provider reports them. The logs do not contain the bearer token, prompt, or response. Log records are stored in the PostgreSQL database configured for the service and are not automatically expired by the application.

IP addresses are read from Cloudflare’s cf-connecting-ip, x-real-ip, or the first x-forwarded-for value, in that order. The hosting proxy must replace or sanitize these headers for the address to reliably identify the connecting client. If no valid address is supplied, the log shows that the address was unavailable.

Your choices and rights

Depending on applicable law, you may have rights to access, correct, erase, restrict, or object to certain processing. Contact the publisher by post at the address above for inquiries about this website. Contact the operator of a separately deployed Flonno instance about that instance’s data.

Updates

This notice may be revised when the service or its data practices change. Check this page for the current version.

Last updated: September 28, 2026