# Rocket Relay Data Processing Summary

Last reviewed: April 27, 2026

## Processed data categories

Account data:

- User email address.
- Organization name and organization code.
- Password hash.
- Organization membership and role.
- Billing contact and alert email settings.

API operation data:

- API key prefix and hashed API key.
- Request metadata: model, provider, route path, status code, latency, token counts, request ID, IP address, user agent, and timestamp.
- Usage records and balance transactions.
- Model-quality probe metadata: model ID, provider, HTTP status, latency, prompt hash, response hash, route status, and timestamps.

Secret data:

- Customer BYOK upstream credentials.
- Webhook signing secrets.
- Stripe and SMTP configuration secrets.

Payment data:

- Stripe customer, checkout, payment, and subscription identifiers.
- Crypto payment records, transaction hash, sender address, network, amount, and review status.

## Prompt and response content

Rocket Relay is configured to avoid storing customer prompt and response bodies in proxy logs and business request logs. Metadata required for billing, reliability, abuse control, model-route evidence, and diagnostics is retained. Active model probes store prompt hashes and response hashes, not customer content.

## Storage locations

- PostgreSQL: durable account, billing, usage, request metadata, audit, webhook, encrypted secret, and model quality records.
- Redis: operational caches, rate limits, billing queues, webhook queues, refresh sessions, and temporary in-flight balance reservations.
- Upstream model providers: receive prompts and return completions for routed requests.

## Retention posture

Usage and request log tables are monthly partitioned. Managed partitions create future partitions and drop expired partitions according to configured retention windows. Organization-level request-log retention settings are available for customer policy alignment.

## Access controls

Portal access is scoped by user role. Platform admin access is required for system-wide operations such as pricing, supply-chain, audit, Stripe, and model quality administration.