Built so your prompts stay yours.
ObixHub is a transparent gateway, not a data lake. The less we keep, the less there is to leak — so we keep almost nothing about what you send.
We don’t keep them.
Message bodies and tool inputs pass through the gateway and are never written to our storage. We record only metadata — token counts, latency, model, and status — which is all we need to bill and to show you usage.
No storage on our side; providers vary.
We do not retain prompts or completions. Where a provider exposes a no-store or zero-data-retention option, we use it when available (for example, OpenAI Responses requests must send store:false). Upstream retention still depends on each provider’s product and account terms — we don’t claim a universal guarantee.
Hashed, scoped, revocable.
Your customer-facing obx_ key is stored only as a hash — we can’t read it back. Each key is scoped to one team’s prepaid wallet, carries its own model allowlist, and can be rotated or revoked from the dashboard. The obx_ key is never forwarded to model providers. Linked provider credentials needed to call Anthropic or OpenAI are stored encrypted at rest and used only for that team’s traffic.
We never see your card number.
Top-ups and card setup run on Stripe’s hosted checkout. Full card details never touch our servers. If you enable auto-recharge, Stripe keeps a payment method on file and we store only the payment-method reference needed to charge off-session — not the card number.
Encrypted in transit and at rest.
All traffic to and from ObixHub is TLS-encrypted. Balance, usage, account data, and encrypted provider credentials are stored with encryption at rest on our infrastructure providers.
Team-isolated by design.
Balance, keys, and usage are partitioned per team. A member’s key only ever draws on its own team’s prepaid balance, bounded by the model allowlist its owner sets.
Found something? Tell us before you tell the internet.
If you believe you’ve found a security issue, email hi@obixhub.com with the details and steps to reproduce. We’ll acknowledge, investigate, and keep you posted — and we won’t pursue good-faith research that respects our users’ data.