Changelog
Customer-visible changes to RSFlowHub, newest first. Live service health is on the status page.
Image generation works again
- Fixed: The Image Generation API returned an empty image while still charging credits. It now generates real images and returns their URLs, size and expiry time.
- Added: New aspect_ratio parameter for image generation (1:1, 16:9, 9:16, 4:3 and more). size still works and is mapped to the closest ratio.
- Improved: Image generation now costs 120 credits per generated image (it used to bill one flat price per call whatever n was). You only pay for images that are returned; prompts blocked by the safety filter cost nothing. It needs a paid plan or a credit top-up and is limited per account per day.
Reliability and transparency
- Added: Several named API keys per account, each with its own last-used time and its own revoke button. Existing keys were kept as "Default key". We email you when a key is created or revoked.
- Added: Download your account data and delete your account yourself from Settings > Security > Your data.
- Added: A weekly automated test call to a sample of AI endpoints; the result is shown on the status page.
- Improved: Google Analytics now loads only after you accept analytics cookies.
- Added: API responses now include X-RateLimit-Limit and X-RateLimit-Remaining headers, and 429 responses include Retry-After.
- Added: The status page shows ongoing incidents, planned maintenance and a 90-day incident history.
- Fixed: The Rate Limits & Credits docs now show the real per-plan limits and the exact credit formula. Earlier versions listed a tiered charge table and a concurrency limit that did not match how the API works.
- Fixed: The Error Codes docs now list the codes the API actually returns (for example INSUFFICIENT_CREDITS, not insufficient_credits).
- Improved: The API playground shows the error code, message and request ID when a call fails, instead of a generic network error.
Clearer policies and security contact
- Improved: Rewrote the Privacy Policy, Terms, Refund Policy, Cookie Policy and Security page to state exactly what we do: which providers process data, the 24-hour cache, what logs contain, credit expiry and that plans never renew automatically.
- Security: Published a vulnerability disclosure policy and /.well-known/security.txt.
- Added: Promo codes at checkout, and account settings for password, signing out other devices, email preferences and GST billing details.
Checkout
- Added: A review screen before payment that shows the exact total, with a GST breakdown for INR payments, plus payment receipt emails.
Forms launched
- Added: Forms: no-code contact forms and newsletter signups with double opt-in, AI spam checks, webhooks and per-visitor export and erase tools. Forms has its own plans.
Website chat widget
- Added: The no-code website chat widget: one script tag, settings managed in the dashboard, lead capture and support tickets.
- Security: Chat widget owner protection: allowed domains, a daily message limit, and retention settings with export and erase for visitor data.
Billing controls
- Added: A monthly spending limit with alerts, and low-credit email alerts.
- Security: Regenerating an API key now asks for your password (if you have one) and sends an email notice.
API billing accuracy
- Fixed: Hardened the request flow so a call is charged exactly once and failed calls are never charged.
Free utility calls
- Added: Sentiment analysis, PII redaction, spam detection and intent detection are free for small inputs, up to a monthly quota per plan.
API playground
- Added: An interactive playground to try every API endpoint from the browser.