Privacy Policy

1. What we collect.

Account data (name, email, password hash — never plaintext), API usage metadata (model, token counts, latency, status, cost), billing records via Dodo Payments, and support tickets. We also record connection metadata for security and fraud prevention: IP address, user agent / device string, and an approximate country derived from the IP. Each login stores the IP and user agent on its session record; security and access logs are retained for up to 12 months and are never used for advertising. Prompt/response bodies are processed for inference and retained only in your request logs, which you can wipe in Settings → Danger zone.

2. What we never do.

We never sell personal data, never store API key secrets (SHA-256 hashes only), and never train shared models on your prompts.

3. Processors.

Dodo Payments (payment processing), our GPU infrastructure providers (compute), email delivery, and analytics: PostHog, Plausible, Google Analytics (only after consent). Enterprise DPAs available — see /enterprise. The full list, with what each one touches, is on /subprocessors.

4. Residency.

Pin data to GLOBAL / US / EU / APAC in Settings. Region preference is honored on a best-effort basis during beta.

5. Your rights.

Delete your data anytime via Settings → Danger zone (wipes keys, credits, usage, deployments, secrets, and webhooks); for a full export contact [email protected] — also the right address for GDPR/CCPA requests.

6. Cookies & analytics.

One httpOnly session cookie for login. Product analytics (PostHog heatmaps, Plausible pageviews, Google Analytics page metrics) load only after you opt in via the consent banner — decline and nothing loads, and Google Analytics runs with IP anonymization. No ad trackers, ever.

7. Zero retention on the gateway.

Prompts and generations sent to gateway.runaii.cloud — including traffic from routing platforms such as OpenRouter — are not written to storage. Only usage metadata (model, tokens, latency, status, cost) is kept. The full detail is on the Data Policy.

8. International transfers.

Compute runs on Google Cloud in the regions listed on /subprocessors. Transfers of EEA, UK or Swiss personal data to other jurisdictions rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

9. California and U.S. state rights.

We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding 12 months. California residents may request access, correction, deletion, portability, or restriction by writing to [email protected]; we verify identity and answer a verifiable request within 45 days, and we do not discriminate against anyone for exercising these rights.

10. Children.

The platform is for business use and is not directed to anyone under 16. We do not knowingly collect their data; if we learn we have, we delete it.

11. Contact and complaints.

Privacy questions, data requests and complaints: [email protected]. If you believe we have infringed data protection law you may also complain to the supervisory authority where you live or work.

Operational detail — what we process, keep and delete, including prompts served to third-party routers — is on the Data Policy.