API keys
Keep keys on the server or in a suitable local secret store. Do not place them in browser code, public repositories, URLs or screenshots. Revoke exposed keys and scope access through account configuration.
Models and tools
Model requests may pass through the configured provider or channel. Confirm processing terms before sending confidential information. Local utility tools process inputs in the browser; this does not apply to model API calls.
Operational review
Define who approves changes, outgoing messages and other consequential actions. Preserve evidence for investigating failures without adding secrets to analytics.
Contact
Report suspected issues through the contact email. Include relevant request identifiers without sending passwords or API keys. No security certification or response-time commitment is claimed here.
Contact: 244075703@qq.com