We earn your trust by design. Here is exactly what we do with your keys, your data, and your content.
Bring your own provider keys (BYOK). We never store a master key on your behalf. Your keys are encrypted at rest and only used to call your chosen providers.
All stored keys are AES-256-GCM encrypted. Database leaks do not expose your provider keys. Encryption keys are separated from data keys.
We mask your keys in the UI and never expose the plaintext after save. Support staff cannot retrieve or display your stored key values.
Delete a key with one click. Deletion is permanent and propagated to our storage within seconds. No soft-delete, no hidden backup.
Last audited: 2026-11-06. For security reports, contact security@lenswave.ai.