Terms and data handling
Short, because there is little to say: you bring your own supplier key, your generations bill your own balance, and we keep the record that makes them accountable.
Your key
A warpfold key holds the supplier key you gave it. It is sealed at rest, decrypted only to forward a request you made, and never written to a log or shown on a page. Delete the warpfold key and the supplier key inside it goes with it.
We never use your key for anything but your own requests.
What you pay
Every generation is billed by Higgsfield to the balance behind your own key. warpfold adds nothing on top during the pilot and never holds your funds.
Quotes are at list price. A request the cap refuses is never sent, so it costs nothing. A request the supplier fails is not charged by the supplier. A finished output the judge rejects has already been produced: the supplier has charged for it, and no verdict of ours reverses that.
What is kept, and for how long
- Upstream — Higgsfield retains generated outputs on its own systems for at least 7 days. That is their policy, not ours, and we cannot shorten it.
- Your ledger — the request record (model, quote, cost, status, verdict, prompt hash, timestamps) is kept for 90 days so the review page and the board stay honest. Prompts themselves are stored as hashes, never in clear.
- Your assets — we keep no copy. An asset is served from the supplier's URL for as long as the supplier serves it; after that the link in your ledger stops resolving.
- Your key — kept sealed until you delete it.
The judge
The judge is advisory. Text against the text you asked for is the one hard gate; every other check returns a reason, not a ruling. A rejected output stays visible and you can overrule it, and every disagreement between you and the judge is logged — which is what lets the public pass-rate board be checked rather than believed.
AI-generated content
Every asset ships with a signed sidecar carrying this disclosure, as required of generated content (EU AI Act Art. 50).
This content was generated by an AI model. Generated output, not a record of real events.
Sidecars from this deployment are signed with wf1-5893d1f7e2c3becb. A sidecar that does not verify against that fingerprint did not come from here.