Skip to main content

Privacy

Privacy Policy

How we handle and protect your data, including collection, retention, deletion, and contact procedures.

Last updated: January 1, 2026

Data handling scope
Access and deletion requests
Retention described below
Security controls described below

1. Data Collection

Routeon collects and processes the following categories of personal data:

  • Account Information: Name, email address, company name, and billing information.
  • Usage Data: API requests, token consumption, and service utilization metrics.
  • Technical Data: IP addresses, device information, and browser type.
  • Communication Data: Support tickets, feedback, and correspondence.

2. Data Processing

We process your data for the following purposes:

  • Provision and management of our AI Gateway services.
  • Billing, invoicing, and account management.
  • Security, fraud prevention, and compliance.
  • Communication about services and updates.
  • Improvement of our services through analytics.

3. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

  • Account Data: Retained while your account is active and for 30 days after deletion.
  • Usage Logs: Retained for 90 days for security and billing purposes.
  • Billing Records: Retained for 7 years as required by law.
  • Security Logs: Retained for 1 year for audit and security purposes.

4. Data Security

We implement industry-standard security measures to protect your data:

  • AES-256 encryption for data at rest and in transit.
  • Security controls and deployment-specific safeguards are documented separately.
  • Regular security audits and penetration testing.
  • Multi-factor authentication for all administrative access.
  • Role-based access control with least privilege principle.

5. Your Rights

Under GDPR, CCPA, and other applicable regulations, you have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data.
  • Portability: Receive your data in a portable format.
  • Objection: Object to certain processing activities.

6. Data Deletion

Upon request, we will delete your personal data within 30 days. To request data deletion:

  • Submit a request through your account settings.
  • Contact our support team at privacy@routeon.ai.
  • Submit a written request to our Data Protection Officer.

7. Third-Party Services

We use the following categories of third-party services:

  • Cloud Infrastructure: For hosting and running our services.
  • Payment Processors: For processing payments securely.
  • AI Model Providers: For routing requests to various AI models.
  • Analytics Services: For understanding service usage.

8. Contact Us

For privacy-related inquiries or to exercise your rights, please contact:

Data Protection Officer
Email: privacy@routeon.ai
Response time: Within 30 days