AISIX Cloud Privacy Policy

1. Purpose and Scope

APISEVEN PTE. LTD ("AISIX", "we", "us" or "our") provides this Privacy Policy to explain how we collect, process, and disclose information about you when you use AISIX Cloud — our hybrid-cloud AI gateway — and our related websites and services (the "Services"), and the rights you have. "Personal data" means information that identifies or reasonably identifies an individual.

2. Information We Collect

2.1 Information you provide. When you register and use the Services, you may provide your name, job title, company name, email address, and the configuration you create (for example, AI provider connections, model routes, budgets, and guardrail policies). Provider credentials you supply are stored encrypted.

2.2 Gateway traffic. Because the Services are an AI gateway, the prompts and other content you and your users submit ("Input") and the model responses returned ("Output") pass through the Services. Section 3 explains how we handle this.

2.3 Automatically collected information. We collect log and telemetry information about use of the Services, such as request metadata, timestamps, token counts, latencies, IP address, and device/browser information. Identifiers such as API keys and IP addresses in request logs are hashed or masked where practicable.

3. AI Gateway Data — Prompts and Outputs

When you use the Services to reach an AI provider, your Input and the resulting Output are transmitted through the Services and may contain personal data that you choose to include.

We process Input and Output only to provide the Services to you — to route requests to the AI provider you select, meter usage, apply the caching, rate-limit, budget, and guardrail policies you configure, and provide logging, observability, and support. The degree of logging and the retention of request content are governed by your configuration.

AISIX does not use your Input or Output to train, fine-tune, or otherwise develop or improve any AI or machine-learning models. AISIX may, however, create aggregated or de-identified data from your Input and Output — which does not identify you or any individual and cannot reasonably be used to re-identify you — and use it to analyze and improve the Services. AISIX does not use that data to train or develop AI models either. This no-training commitment is AISIX's own.

To fulfill your request, your Input is transmitted to the AI provider you select, and that provider returns the Output. Each AI provider is a separate company that processes your Input and Output under its own terms and privacy policy, which may permit the provider to use, retain, or train on them. That processing is governed by your relationship with the AI provider, not by AISIX; AISIX does not control it and is not responsible for it, and we encourage you to review the provider's terms. You are responsible for ensuring you have a lawful basis to submit any personal data contained in your Input.

4. Cookies and Similar Technologies

Our website and dashboard use cookies and similar technologies to enable features, keep you signed in, and understand usage so we can improve the Services. Most browsers let you delete or refuse cookies; if you do, some features may not function.

5. How We Use Information

We use the information described above to provide, operate, secure, and improve the Services; to authenticate you and administer your account; to meter usage and bill fees; to respond to your requests and provide support; to monitor and analyze usage to detect and prevent fraud, abuse, and security incidents; and to comply with applicable law. We use identifiable Input and Output only as described in §3; we may use aggregated or de-identified data derived from them to improve the Services, and we never use Input or Output to train or develop AI models.

We do not sell your personal data. We share information with: the AI providers you choose to route requests to (as described in §3); service providers and subprocessors who process data on our behalf under appropriate confidentiality and security obligations; a successor in connection with a merger, acquisition, or asset transfer; and authorities or others where we believe disclosure is required by law or necessary to protect the rights, property, or safety of AISIX, our customers, or others.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete the personal data we hold about you, and to object to or restrict certain processing. To make a request, email support@api7.ai; we may take steps to verify it. You may opt out of promotional emails via the unsubscribe link; we may still send transactional messages such as security notices.

8. Storage, Retention, and Security

Information we collect is stored on our servers in Singapore. We retain it only as long as necessary to provide the Services and satisfy the purposes in this Privacy Policy, unless a longer period is required by law; request-content retention follows your configuration. We use encryption in transit and at rest, tenant isolation, access controls, and PII masking, among other measures, though no method of transmission or storage is completely secure.

9. International Data Transfers

AISIX is based in Singapore and processes and stores information there. We, our subprocessors, and the AI providers you select may transfer your information to, or access it in, jurisdictions that may not provide an equivalent level of data protection as your home jurisdiction. We take appropriate steps to ensure such transfers comply with applicable law.

10. Minors

The Services are not directed to minors, and minors may not create accounts without the consent of a parent or guardian.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on this page, and for material changes we will provide a more prominent notice. Without your express consent, we will not reduce your rights under this Privacy Policy.

12. How to Contact Us

If you have questions about this Privacy Policy, email support@api7.ai. We will respond within thirty days of verifying your identity.