KAISTA CLOUD / PRIVATE BETAOpen Documentation ↗
Kaista CloudAI COMPUTE CLOUD
Start building
SECURITY / DATA / POLICIES

A clear account ofwhere data goes.

This page documents the controls and data handling implemented by Kaista Cloud today, together with the published Private Beta policies. Qualified counsel should complete review before public checkout opens.

Secure glass data channels carrying light into a protected compute core
CONTROLLED DATA PATHEvery transfer has a defined boundary.
DATA PATH / VERIFIED
01Your application
→
02Kaista Cloud
→
03Model infrastructure

Kaista Cloud authenticates the key, reserves credits, and routes requests to approved fixed model endpoints.

LEDGER / STORED

The usage ledger stores

  • Account identifiers
  • API key prefix and irreversible hash
  • Model and token counts
  • Reservation, charge, and refund state
  • Request ID and timestamps
LEDGER / NOT STORED

The usage ledger does not store

  • Raw Kaista Cloud API keys
  • Model-provider credentials
  • Prompt or response bodies
  • Payment card data in the browser
API content must still be sent to the infrastructure provider serving the selected model. See the published Privacy Policy for the current data-handling principles.
IMPLEMENTED CONTROLS

Controls implemented today

SERVER-ONLY SECRETS

Upstream and Supabase administrative keys remain in server environments.

HASHED API KEYS

Raw customer keys are shown once; the database stores a SHA-256 hash.

ATOMIC BILLING

Credits are reserved first, settled on success, and released on failure.

ROW ISOLATION

Supabase RLS limits wallets, keys, and usage records to their owner.

FIXED ROUTES

The proxy only permits server-approved HTTPS model endpoints and routes.

REQUEST LIMITS

JSON bodies are capped at 2 MB and upstream calls have a timeout.

LAUNCH DOCUMENTS

Published Private Beta policies

These five documents currently govern the closed beta. Qualified counsel should review them against the registered business and sales jurisdictions before public checkout opens.

PUBLISHED

Terms of Service

Accounts, payment, liability limits, suspension, and termination

PUBLISHED

Privacy Policy

Data categories, retention, service providers, and international processing

PUBLISHED

Cookie Policy

Sign-in sessions, language preferences, and future non-essential tracking

PUBLISHED

Acceptable Use Policy

Prohibited uses, abuse response, and model-supply restrictions

PUBLISHED

Credits & Refund Policy

Non-refundability, legal exceptions, disputes, and expiry

PUBLISHED

Support & Service Policy

Support hours, response targets, maintenance, and incidents

These are the currently published Private Beta versions and do not replace professional advice for the business, tax, and sales jurisdictions involved.