Privacy Policy.

Operator & Company Status

routing.run is operated by Routing Run Private Limited, a company incorporated in India. References to "routing.run", "we", "us", and "our" mean Routing Run Private Limited.

The Routing Run name, routing.run branding and domain, logos, and related materials are the intellectual property of Routing Run Private Limited.

routing.run is an early-stage service operated by Routing Run Private Limited. This policy explains how we collect, use, and protect information when you use the Service.

1. Overview

This Privacy Policy describes how routing.run ("we", "us", or "our") collects, uses, and protects your information when you use our AI model routing platform (the "Service"). We are committed to protecting your privacy and being transparent about our data practices.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account Information

When you create or use an account, we may collect:

• Email address
• Name and profile details made available by your sign-in provider, if applicable
• Billing and transaction information provided by our payment or billing partners

Usage Metadata

We collect limited usage and operational metadata needed to route requests, calculate usage, protect accounts, and operate the Service:

• Request counts and timestamps
• Selected model and provider, token counts, pricing and billing metadata, and application attribution
• Response status, latency, error, and failover information
• Request hashes used for operational correlation, not request content
• IP address, user-agent, session, login, and audit signals used for security, abuse prevention, rate limiting, and account protection

For clarity: request content must be processed in memory and forwarded to the selected model provider. The active chat, Anthropic-compatible, and embedding usage logging paths do not persist prompt or response bodies.

What We Do Not Use for Profiling or Advertising

We may process limited IP and network information for security, abuse prevention, rate limiting, and session protection.

3. How We Use Your Information

We use collected information exclusively for:

• Service operation: Routing requests, applying policies, and managing failover
• Billing: Processing payments and providing usage reports
• Service improvement: Analyzing aggregate usage patterns to improve reliability and performance
• Communication: Sending essential service notifications, security alerts, and billing updates
• Support: Responding to your inquiries and resolving technical issues

We do not use your data for advertising, profiling, or any purpose unrelated to operating the Service.

4. Data Sharing & Third Parties

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share limited data with:

• AI inference and routing processors: Request content and the technical metadata needed to serve it are forwarded to the model-serving route selected for the request. That route may be operated by a model developer, cloud platform, or inference/routing partner, and may change during availability failover. Enabled intermediary inference services are included—not only the company that developed the selected model. Contact [email protected] for the current subprocessor list.
• Payment processor: Polar processes subscriptions, top-ups, invoices, taxes, and related transaction records on our behalf.
• Infrastructure and security: Cloudflare and our hosting, database, email, and logging vendors process limited data needed to host, secure, monitor, and operate the Service.
• Site analytics: Databuddy processes page views, interactions, outgoing-link events, web-vital measurements, and client errors for this website. These events may include browser, device, page, referrer, and network metadata.
• Legal compliance: We may disclose information if required by law, subpoena, or legal process

5. Data Security

We use technical and operational controls to protect your data, including:

• All API traffic is encrypted in transit using TLS 1.2+
• API keys are stored using one-way hashing
• Security, login, and administrative events are recorded where needed to investigate abuse and protect accounts

If we discover a confirmed security breach affecting your personal data, we will provide notifications as required by applicable law.

While we take reasonable precautions, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain account and operational data for as long as reasonably necessary to operate the Service, maintain security, process billing, comply with legal obligations, and enforce our agreements. When you request account deletion or close your account, we will delete or anonymize personal data unless retention is required for billing, tax, accounting, security, fraud prevention, dispute resolution, or legal obligations.

• Billing and transaction records may be retained as required by applicable tax, accounting, and financial regulations
• Security, audit, and operational records may be retained for a longer period when needed to protect the Service and investigate abuse
• Aggregate or de-identified usage statistics may be retained to understand service reliability and performance

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request account deactivation and deletion or erasure of personal data where applicable under law
• Portability: Request your data in a machine-readable format
• Objection: Object to certain types of data processing

To exercise any of these rights, contact us at [email protected]. We will respond within the period required by applicable law.

8. Cookies & Analytics

We use cookies and similar browser storage to support authentication, session management, theme preferences, and core product functionality. We also use Databuddy for first-party product and website analytics. We do not use third-party advertising cookies or sell analytics data.

• Essential cookies may be used for authentication and session management
• The landing site stores your light or dark theme preference locally
• Databuddy may record page navigation, interactions, outgoing links, web vitals, and client errors
• Global Privacy Control and Do Not Track signals disable optional landing-site analytics
• You can change optional analytics for this browser below or disable browser storage in your browser settings

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly.

10. International Data Transfers

Your data may be processed and stored in countries outside your jurisdiction. Where applicable law requires transfer safeguards, we will use an appropriate legal mechanism.

11. Governing Law

This Privacy Policy is governed by the laws of India, unless applicable data protection laws require otherwise.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on this page and updating the "Last updated" date. We may also provide an account or email notice where appropriate or required by law.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: