Legal
Plain language, no dark patterns. This policy covers hacxgpt.com, the console, and the API at api.hacxgpt.com.
Prompts and outputs exist only to serve your request and a rolling server-side cache of recent responses. Content is deleted within 24 hours. We keep anonymous token counts for billing and abuse prevention, and we never train on your data.
There is no ad network on this platform, no profiling of content, and no sale of data. Your prompts are not training material.
| Data | Detail |
|---|---|
| Account basics | Email address and display name you provide when your account is created, plus your plan and credit balance. |
| API keys | Stored as hashes. A key's secret is shown once at creation and cannot be recovered from our side. |
| Request metering | Per request: model, endpoint, token counts, status, and latency. Metering records contain no request content. |
| Payments | Handled by our payment processor. We store the outcome and the mapping to your account, not your wallet details. |
Public form endpoints (like access requests) use hashed IP addresses and rate limiting. The hashes are not reversible and are not used for tracking. API abuse signals are metered per the Acceptable Use Policy.
Hosting, payment processing, and transactional email - named by function because that's all they need to be. No analytics trackers, no ad scripts, no data brokers.
You can rotate or revoke API keys, and you can delete your account through support. Deletion requests go to support@hacxgpt.com or Telegram, and we act on them directly.
The platform is in beta, and this policy can change. Material changes are announced on the Updates page before they take effect.
Get started
Support answers privacy questions the same way it answers everything else: directly.