Security

Last updated: July 10, 2026

Security is built into how the GenRelay platform (genrelay.ai) is designed and operated. This page summarizes the main measures we take and how you can help keep your account safe.

Encryption in transit

All traffic between you, our platform, and upstream providers is served over HTTPS/TLS. We do not accept API traffic over unencrypted connections.

Credential protection

Passwords are stored only as salted, one-way hashes — never in plain text. API keys are shown once and stored in a form that lets us authenticate your requests without exposing the key elsewhere. You can revoke and rotate keys at any time from the dashboard.

Data minimization

We keep as little of your data as possible. We do not store the bodies of your prompts or the content they generate as part of normal operation — requests are relayed to the upstream provider and returned to you. We retain only the metadata needed to meter usage and bill correctly. See our Privacy Policy for details.

Access & isolation

Each account's data, keys, and credit balance are isolated. Administrative access to systems is limited to what is necessary to operate the Service.

Protecting your account

• Keep your API keys secret; never embed them in client-side code or public repositories.
• Rotate keys immediately if you suspect exposure.
• Use a strong, unique password and enable any available two-factor or passkey login.
• Scope and monitor your usage; set limits where the dashboard allows.

Reporting a vulnerability

If you believe you have found a security issue, please report it responsibly to yubo100001@gmail.com. Give us reasonable time to investigate and fix before public disclosure. We appreciate the security community's help.

No absolute guarantees

No system can be completely secure. We work continuously to protect the Service, but we cannot guarantee absolute security and encourage you to follow the practices above.