Privacy

Effective 20 October 2026

Governor (governor.bsvkey.com) is run by Embryo Space Inc., doing business as BSVKey ("we"). It sits between your software and your AI providers and enforces spending limits. This page explains what it records. The short version: it records what each call cost and which limits applied, never what was said.

What Governor never stores

• Prompt and reply text. Requests pass through to your AI provider and replies pass back. Governor reads them only to estimate and measure cost, and to check tool calls against any tool rules you set, and does not save their content. One exception: when a tool rule holds a reply for approval, that reply and its tool input are kept in memory (never on disk) so your admin can see the input and the agent can get the reply once approved. They are dropped when the request is decided and used, denied, after 24 hours, or on restart.
• Your AI provider keys are kept as server settings and are never written to the audit trail or shown in the console.

What Governor records

• Call records: which Governor key made the call, the model, token counts, cost, status, duration, and a one-way hash of the request (a fingerprint that cannot be turned back into the text).
• Approval requests: the request's shape (expected tokens, number of messages, tool names, whether it streams), the spend and caps at that moment, and the decision with its reason.
• Admin actions: keys created or changed, kill-switch and outage-drill changes, and sign-ins. If you link a .key name, the name and its address are recorded with the actions taken under it.
• Alerts you configure may be sent to the webhook address you choose, for example Slack.

The audit trail cannot be edited

Records are signed and chained together so that any change can be detected. That is the point of the product, and it means individual records cannot be deleted or rewritten. A daily fingerprint of the records (a Merkle root, a single hash) may be published on the Bitcoin BSV blockchain so anyone can check the trail later. That fingerprint contains no record contents.

In your browser

• No cookies, no analytics and no advertising trackers.
• The console keeps your admin token in this browser tab only (session storage) and your theme choice in local storage. If you load a token file, it is read in your browser and never uploaded.
• The proof checker on the home page asks WhatsOnChain (a public Bitcoin BSV explorer) whether a block exists. That request goes from your browser to WhatsOnChain and is covered by their privacy policy.

Where it runs, and who else is involved

• Governor runs on Fly.io in Dallas, Texas, and stores its data on a disk attached to that server.
• Your requests go to the AI providers you use (for example Anthropic, OpenAI or xAI) under their own terms and privacy policies.
• We do not sell or share your data with anyone else, and we do not use it to train AI models.

How long we keep it

Records are kept for as long as the service runs for you, because the audit trail is only useful when complete. If you stop using Governor, ask us and we will tell you what can be removed and what must stay for the chain to remain verifiable.

Contact

Questions or requests: embryospace@gmail.com. If this policy changes, we will update this page and its date.