Privacy Policy

VaultAPI operates the VaultAPI AI gateway. For data submitted through the Service on behalf of an organization, we generally act as a processor; for account and billing data, we act as a controller.

• Account data: name, email, password (hashed), and organization details.
• Provider credentials: third-party LLM API keys stored encrypted; only a masked hint is displayed.
• Billing data: plan selection and payment identifiers. Card details are handled by Stripe and Razorpay, not stored by us.
• Request metadata and logs: provider, model, token counts, cost, latency, status, timestamps, and related metadata.
• Technical data: IP address, device/browser information, and security or audit events.

Prompt content is sent directly to the third-party provider you select. Request metadata and usage statistics are retained for observability and billing according to your plan.

We use data to provide routing, authentication, tooling, billing, security and abuse prevention, support, product improvement, and communications, on the legal bases applicable to those activities.

We share data with service providers that help operate the Service, including cloud infrastructure providers, managed Redis cache providers, payment processors (Stripe and Razorpay), and the LLM providers you choose. We do not sell personal data. We may disclose data when required by law.

Data may be processed in global cloud infrastructure regions. Where required, we use appropriate transfer safeguards, such as Standard Contractual Clauses.

• Account and billing data: for the account lifetime plus any legally required period.
• Request logs: per plan retention window (7 to 365 days), then pruned automatically.
• Encrypted provider keys: until deleted or the account closes.

Our measures include encrypted stored provider keys, hashed passwords and refresh tokens, access controls, and audit logging. No method of transmission or storage is 100% secure.

Subject to applicable law, you may request access, correction, deletion, portability, or restriction; object to certain processing; or withdraw consent. Contact vaultapi.support@gmail.com. You may also complain to the applicable data protection authority.

The Service is not directed to children under 18, and we do not knowingly collect their data.

We use necessary cookies, including authentication cookies, and may use analytics cookies where applicable.

We will post updates here and, for material changes, notify you through the Service or email.

Data protection contact: vaultapi.support@gmail.com.