Privacy Policy

1. Information We Collect

We collect information in the following categories:

Account Information

When you create an account, we collect:

• Email address
• Account preferences and settings
• Billing information (processed by Stripe; we don't store full card numbers)

Anonymous Telemetry Data

The RelayPlane Proxy collects anonymous telemetry to improve routing intelligence. Here is the exact schema of what we collect:

{
  "device_id": "anon_a1b2c3d4e5f6",   // Random ID, not fingerprintable
  "task_type": "code_review",          // Inferred from token patterns, NOT prompt content
  "model": "claude-3-5-sonnet",        // Which model was used
  "tokens_in": 1500,                   // Input token count
  "tokens_out": 800,                   // Output token count
  "latency_ms": 2340,                  // Response time
  "success": true,                     // Whether request succeeded
  "cost_usd": 0.0078,                  // Estimated cost
  "timestamp": "2026-02-08T10:30:00Z"  // When request occurred
}

What We NEVER Collect

2. How to Opt Out of Telemetry

You have complete control over telemetry collection. To opt out:

Additional privacy options:

• --offline - Runs the proxy with no network calls except to AI providers
• --audit - Shows exactly what telemetry would be sent before sending
• telemetry status - Check your current telemetry settings

The proxy continues to function normally with telemetry disabled. Opting out means routing decisions will use static rules instead of personalized learning.

3. How We Use Your Information

We use collected information to:

• Provide and operate the Service
• Process payments and manage subscriptions
• Send transactional emails (welcome, billing, security alerts)
• Improve routing intelligence through aggregate telemetry analysis
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information. We do not use your data for advertising.

4. Data Sharing

We share information only in these circumstances:

• Service providers: Stripe for payments, Resend for email delivery
• Legal requirements: When required by law, court order, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorize sharing

5. Data Retention

We retain your data as follows:

• Account data: Retained while your account is active, deleted within 30 days of account deletion
• Telemetry data: Aggregated and anonymized after 90 days; raw data deleted after 1 year
• Billing records: Retained for 7 years as required by tax law

6. Your Rights (GDPR, CCPA)

Depending on your location, you may have the following rights:

For All Users

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Export: Receive your data in a portable format

For EU/EEA Residents (GDPR)

• Legal basis: We process data based on contract performance and legitimate interests
• Object to processing: You may object to processing based on legitimate interests
• Restrict processing: You may request we restrict processing in certain circumstances
• Supervisory authority: You may lodge a complaint with your local data protection authority

For California Residents (CCPA)

• Know: You have the right to know what personal information we collect
• Delete: You have the right to request deletion
• Non-discrimination: We will not discriminate against you for exercising your rights
• No sale: We do not sell personal information

To exercise any of these rights, email us at privacy@relayplane.com. We will respond within 30 days.

7. Security

We implement industry-standard security measures to protect your data:

• All data transmitted over HTTPS/TLS encryption
• API keys are hashed and salted before storage
• Database encryption at rest
• Regular security audits and penetration testing
• SOC 2 Type II compliance (in progress)

The proxy source code is open source and available for security review at github.com/RelayPlane/proxy.

8. International Data Transfers

Our services are hosted in the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US. For EU/EEA users, we rely on Standard Contractual Clauses to ensure adequate data protection.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related questions or to exercise your data rights:

• Email: privacy@relayplane.com
• Website: relayplane.com/contact

For general support, email support@relayplane.com.