Privacy Policy

FluxRouter is operated by Ferrox Labs, LLC, a Florida limited liability company. FluxRouter is an API gateway that routes your AI requests to underlying model providers. This page explains, in plain language, what data we handle and how. For questions or data requests, email hello@fluxrouter.ai.

What we collect

• Account information — your email and the details needed to sign you in and run your account.
• Usage and billing data — request metadata such as token counts, cost, latency, and which model served the request, so we can route, meter, and bill accurately.
• Payment information — handled by our payment processor, Stripe. We do not store your full card number.
• Support messages — if you contact support or use our in-page support assistant, we process what you send us to answer you.

How we use your data

We use it to provide and route the service, meter usage and bill you, support your account, keep the service secure, and meet our legal obligations. Where the GDPR applies, our legal bases are: performance of our contract with you (to provide and bill the service), our legitimate interests (to secure and improve the service), and compliance with legal obligations.

Your prompts and responses

FluxRouter is a routing gateway, not a model trainer. When you make a request, its content is forwarded to the underlying provider that serves it, and that provider processes it under its own terms. To operate, secure, and protect the service from abuse, we keep a PII-redacted (scrubbed) copy of the request and operational metadata (token counts, cost, latency, and the model selected) — not the raw, unredacted content. We do not use your prompts or responses to train any FluxRouter model; our internal routing-quality systems are trained only on synthetic, internal traffic — never on your content. We do not sell or share your personal information (as those terms are defined under applicable law, including for cross-context behavioral advertising).

Service providers we rely on

To run FluxRouter we use a set of trusted providers, each of which handles data under its own terms:

• Stripe — payments and billing.
• Supabase — authentication and database.
• Cloudflare — security and content delivery.
• Resend — transactional email.
• Chatbase — our in-page support assistant; it processes the messages you type into it.
• AI model providers — the third parties that serve your requests.

Where your data is processed

We process data in the United States and may use infrastructure in other regions, and your request content is processed wherever the provider that serves it operates. If you are in the European Economic Area or the UK, this means your data may be transferred internationally; where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

How long we keep data

We keep account data while your account is active, billing and tax records for as long as the law requires, and request metadata for a limited operational period. We delete or de-identify data when it is no longer needed for these purposes.

Your rights and choices

You can request access to, correction of, or deletion of your account data by contacting us. Depending on where you live, you may have additional rights — including to know what we hold, to delete, to correct, to data portability, to object to or restrict certain processing, and to opt out of any sale or sharing of personal information (we do not sell or share). We will honor verified requests except where we must retain records for billing, legal, security, or fraud-prevention reasons, or for de-identified, aggregate data. EEA/UK users may also lodge a complaint with their supervisory authority. Keep your API key secret; it is tied to your account and billing.

Children's data

FluxRouter is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

Security

We use reasonable measures to protect your data, including encryption in transit, access controls, and vetted service providers. No system is perfectly secure. If a breach affects your personal information, we will notify you and the authorities as required by law.

Contact

For any privacy or data-handling question, email hello@fluxrouter.ai. See also our Cookie Policy. We may update this policy from time to time; the date above shows the latest version.