Privacy Policy

Last updated: June 20, 2026. This Policy explains how Routel, LLC (“Routel”) handles your information.

1. Our privacy-first design

Routel is built to minimize the data we hold. Under Bring-Your-Own-Key, your prompts are sent to your AI provider using your credentials; we do not need to retain your prompt and output content on our servers to operate the core Service, and we do not use your prompts or outputs to train any model.

2. Information we collect

Account data: email and a hashed password (PBKDF2). We never store your password in plaintext.
Provider API keys: stored encrypted (AES-256-GCM) and used only to make calls you initiate.
Settings & memory: preferences and any facts you choose to save (under your control; exportable; deletable).
Usage metadata: minimal audit records (which model/provider served a request, timestamp, estimated cost) for billing, security, and your transparency.
Payment data: handled by Stripe; we do not store full card numbers.

3. Prompt & output content

We do not retain your prompt/response content for training and aim not to persist it server-side beyond what is needed to deliver a response in the moment. Your connected AI provider processes your prompts under their privacy terms — review them. Before any off-device call, Routel applies PII redaction (emails, phone numbers, API keys, card and SSN patterns) by default.

4. How we use information

To authenticate you, route and deliver your requests, enforce spend caps and rate limits, process payments, provide support, maintain security, and comply with law. We do not sell your personal information.

5. Sharing

We share data only with: your chosen AI providers (to fulfill your requests, via your keys), our payment processor (Stripe), infrastructure/hosting vendors acting as processors, and authorities where legally required. We do not share your content for advertising.

6. Your rights

Depending on your location (e.g., GDPR/EEA, UK, CCPA/California), you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object or withdraw consent. Export your memory anytime in-product, or contact us to exercise other rights. We honor verified requests as required by law.

7. Data retention & security

We retain account and minimal usage data while your account is active and as required for legal/financial purposes, then delete or anonymize it. We use encryption for secrets, hashed passwords, signed sessions, and access controls. No system is perfectly secure; you connect keys at your discretion.

8. International transfers

Your data may be processed in countries other than yours. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses).

9. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

10. Changes & contact

We will post updates here and, for material changes, notify you. Contact us at support@routel.ai (Routel, LLC, Texas, United States).

Terms · Acceptable Use Policy