Do not send
- protected health or payment-card information;
- government identifiers;
- passwords, API keys, tokens, or other secrets;
- data requiring a regulated processing agreement that is not in place;
- content you do not have the right to process.
What BreadBowl Embed keeps
Indexes usetext_retention: "none". Source text is processed to build the index but is not stored as retrievable content. BreadBowl Embed stores the document IDs and metadata you provide, derived retrieval data, and aggregate usage records.
Your system remains the source of truth. Update or delete indexed documents when the source changes, and check a user’s access before showing hydrated search results.
Transient scoring does not add documents to an index. It records aggregate usage for the request.
Protect your API key
Use the key only from a backend, worker, protected development machine, or CI job. Store production keys in a secret manager. Never put a key in frontend or mobile code, source control, URLs, logs, screenshots, or support messages. Avoid logging request bodies because they can contain source text and metadata. If a key may be exposed, email mxu@breadbowl.ai or ask your private support contact to revoke it immediately. Share thex-request-id, never the key itself.