Privacy Policy

1. Information We Collect

We collect information you provide directly, such as your name, work email, and company details when you create a workspace. We also collect information generated by using APEXVYRA: API request metadata, run traces (prompts, model selections, tool calls, latency, and cost), workspace configuration, and billing records tied to your AI credit usage.

We do not inspect the content of your prompts or outputs except where necessary to operate a feature you've enabled, such as guardrail evaluation, or where required to investigate abuse or a security incident.

2. How We Use It

We use collected information to operate and improve the platform: routing requests to models, computing AI credit consumption, generating run traces and audit logs, providing customer support, and communicating service updates. We use aggregated, de-identified usage data to understand platform performance and plan capacity.

3. Legal Basis for Processing

Where applicable law requires a legal basis for processing personal data, we rely on: performance of a contract (providing the service you signed up for), legitimate interests (platform security, fraud prevention, product improvement), and consent where you've explicitly given it (for example, opting into product update emails).

4. Data Retention

Run traces and logs are retained according to your plan's retention period (see the pricing page for exact durations by tier). Account and billing records are retained as required for tax and accounting purposes. You can request deletion of your workspace data subject to these legal retention requirements.

5. Third-Party Sharing

We share information with model providers and infrastructure vendors strictly as needed to process your requests (for example, forwarding a prompt to the model your routing policy selected). We do not sell personal information. We may disclose information if required by law or to protect the rights, property, or safety of APEXVYRA, our users, or the public.

6. Cookies & Local Storage

The marketing site and dashboard use browser local storage for functional purposes only: remembering your theme preference (light or dark) and, where applicable, a cookie-consent choice. We do not use tracking cookies, third-party advertising pixels, or cross-site analytics scripts.

7. Security

We apply role-based access control, encryption in transit, and audit logging across the platform. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we work to protect information using industry-standard practices appropriate to the sensitivity of the data involved.

8. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us using the details below; we will respond within the timeframe required by applicable law.

9. International Transfers

APEXVYRA may process and store information in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards consistent with applicable data protection law.

10. Children's Privacy

APEXVYRA is intended for business use and is not directed at individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify workspace administrators by email or through the dashboard before the changes take effect.

12. Contact

Questions about this policy can be sent through the contact page, routed to our Security & Privacy team.