Privacy notice

Tokenopti, Inc. dba Understudy operates a website, early-access application, and gateway for teams evaluating AI model routing and replacement workflows.

This notice describes what we collect today, where it goes, how long we keep it, and how to ask us to delete it.

Website and contact forms: name, email address, company, message content, and basic request metadata such as IP address, user agent, and timestamp.

Authentication: if you sign in with Google, we receive the name, email address, and account identifiers Google provides through WorkOS. If you sign in with email and password, WorkOS processes the credentials and gives us account identifiers and profile fields needed to operate the app.

Gateway: per-request metadata only, such as account, provider, model, timing, status, token counts where available, routing decision, and error metadata. By default, Understudy does not store prompt or completion payloads in the hosted gateway.

Local tools and workbench: traces, prompts, completions, evals, labels, and datasets stay on your machine unless you explicitly choose to upload or share them.

We use a small number of subprocessors to run the service. WorkOS handles authentication. Cloudflare handles edge networking and may host gateway infrastructure, including Workers and planned KV or D1 storage. Vercel hosts the website and app. Upstream LLM providers, including Anthropic and OpenAI, receive the requests you route to them using your own provider relationship. Fireworks AI may be used for model hosting, inference, fine-tuning, or related model operations when that workflow is enabled.

We do not run third-party advertising cookies or analytics cookies on the site.

We use account and request metadata to operate the service, secure accounts, debug reliability issues, enforce usage limits, route traffic, communicate with users, and satisfy legal obligations.

We do not use customer prompts, completions, traces, evals, labels, datasets, or model artifacts to train models for other customers. We only use those materials to provide the workflow you asked us to run, or when you explicitly share them with us.

We keep account records while your account is active and for a reasonable period afterward for security, billing, audit, and legal reasons.

Gateway metadata is retained only as long as needed to operate, debug, secure, and improve the service. Local traces and workbench artifacts are controlled by you on your machine unless you explicitly upload or share them.

You can ask us to delete your account data or exported materials you have shared with us by emailing support@understudylabs.com. We may retain limited records where required for legal, security, or accounting reasons.

We use first-party authentication cookies through WorkOS AuthKit to keep you signed in. We do not use third-party cookies for advertising or analytics, so we do not show a cookie banner today.

We may disclose information to comply with law, respond to legal process, protect rights and safety, prevent abuse, or complete a financing, merger, acquisition, or similar corporate transaction.

For privacy requests, deletion requests, or questions about this notice, email support@understudylabs.com.