The key is passed along in the refactor POST request body to OpenAI's chat endpoint (https://github.com/daniel-black/refactory/blob/5289bf54842d11b2caead3d011f

The key is passed along in the refactor POST request body to OpenAI's chat endpoint (https://github.com/daniel-black/refactory/blob/5289bf54842d11b2caead3d011f2e134ca8b3f87/src/app/api/refactor/route.ts#L15 https://github.com/daniel-black/refactory/blob/5289bf54842d1...) and is not stored anywhere else so yes it should be safe.