Privacy Policy

1. Introduction

KairosRoute ("we," "our," or "us") operates the kairosroute.com website and the KairosRoute API platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and authentication credentials (via Google or GitHub OAuth). We do not store OAuth passwords.

API Usage Data: We log API requests including model used, token counts, latency, and associated costs. We do not log the content of your prompts or completions unless you explicitly opt in to request logging for debugging purposes.

Billing Information: Payment processing is handled entirely by Stripe. We store your Stripe customer ID and subscription status but never store credit card numbers or full payment details on our servers.

Technical Data: We automatically collect IP addresses, browser type, and device information for security, rate limiting, and analytics purposes.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service; process transactions and manage your account; monitor usage for billing, rate limiting, and quota enforcement; improve and optimize the Service; detect and prevent fraud, abuse, and security incidents; communicate with you about your account, updates, and support requests; and comply with legal obligations.

4. How We Share Your Information

We do not sell your personal information. We share data only with: AI model providers (OpenAI, Anthropic, Google, Mistral, etc.) to fulfill your API requests — only the request payload is forwarded, not your account details; Stripe for payment processing; Supabase for database hosting and authentication; analytics providers (PostHog) for anonymized usage analytics; and as required by law or to protect our rights.

5. Data Retention

API usage logs are retained for 90 days for billing and analytics purposes. Account data is retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

6. Data Security

We implement industry-standard security measures including: encryption in transit (TLS 1.2+) and at rest; API key hashing using SHA-256 (we never store plaintext keys); role-based access controls; and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict processing; data portability; and withdraw consent. To exercise any of these rights, contact us at privacy@kairosroute.com.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We use PostHog for product analytics, which may set cookies to track anonymous usage patterns. We do not use third-party advertising cookies. You can control cookies through your browser settings.

9. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: privacy@kairosroute.com