Privacy Policy

This privacy policy (“Policy” or “Privacy Policy”) applies to any RouteTokens (R9S) websites, platforms, application programming interfaces (APIs), and related services (collectively, the “Service”) that are provided and controlled by RouteTokens (R9S) (“R9S”, “we”, “us”, or “our”).

This Privacy Policy explains how we collect, use, share, and otherwise process the personal data of our corporate customers, partners, and other organizations who use the Service, as well as their representatives and end users (collectively “you” or “your”).

Information We Collect

We collect your personal data in three ways: information you provide to us, information we collect automatically when you use the Service, and information we receive from other sources. More detail is provided below.

Information You Provide to Us

• Account Data: When you register an account on behalf of your organization to access the Service, you provide us with personal data such as your name, email address, password, address, billing information, and professional information (including your company name, job title, and contact details). This information is necessary to establish your account, authenticate your identity, and process payments. When you use specific features or if we detect abnormal activity associated with your account, we reserve the right to request valid identity verification documents (such as government-issued ID) to verify your identity.
• Communications Data: When you contact our support team or otherwise communicate with us (for example, to submit a complaint, inquiry, or other request), we receive any information you provide in such communications, including your email address and the content of your message.
• Transaction Data: We collect information related to your purchases and payments, including purchase transaction records, billing history, and payment method details.
• API Request Routing Data: For the sole purpose of routing your API request to the third-party AI provider you have selected, we temporarily process the prompts, queries, and other content you send. We do not retain this data after it has been successfully transmitted to your chosen provider.

Information Collected Automatically

• Technical Data: When you access the Service, we automatically collect device, browser, and network connection related information, such as your device model, operating system, browser version, IP address, and service logs (including error logs). We automatically assign you a user ID.
• Usage Data: We collect information about how you interact with the Service, including your API call timestamps, response times, token consumption, search records, the duration and frequency of your use of the Service, and metadata associated with your API requests. This information is used to monitor system performance, calculate usage-based billing, and detect anomalous activity.
• Advertising Interest Data: We may collect or infer your advertising interest categories based on your interactions with the Service to provide you with more relevant advertising content.

Information From Other Sources

• Third-Party Service Data: If you choose to sign up or log in to the Service using, or link your account to, a third-party service (such as a single sign-on provider), we may collect information from that third party, such as your username and email address.
• Cookies: We use cookies and similar tracking technologies (collectively, “Cookies”) to operate and provide the Service. For a detailed description of the types of Cookies we use and your choices regarding them, please refer to Section 7 of this Privacy Policy.

How We Use Your Information

We use, process, and/or disclose your personal data for the following purposes:

• Providing the Service: To route your API requests to your selected third-party AI provider, to operate and administer your account, to process payments and transaction-related communications, and to provide you with user support and respond to your queries, complaints, or feedback.
• Improving and Securing the Service: To review, analyze, and improve the performance, stability, and security of our Service, including by monitoring usage patterns, identifying and addressing technical or security issues, detecting and preventing fraud or inappropriate activity, and developing new features and capabilities.
• Communications: To communicate with you on service-related matters, including notifying you of changes to the Service, this Privacy Policy, or other applicable terms and agreements.
• Service Providers: We share your information with service providers who perform services on our behalf, in accordance with this Privacy Policy and other applicable confidentiality and security measures.
• Advertising: We process information to provide advertising services, including online identifiers, browsing/search activity records, your location information, and your interactions with ads. Advertising helps keep our Service and many websites and services free of charge. You can control what information we use to show you ads in your account settings.
• Compliance and Enforcement: To comply with our legal obligations, including assisting with law enforcement or government investigations as required by applicable law, to enforce our agreements, terms of service, and other policies applicable to you, and to protect our legal rights and commercial interests, as well as those of our users and the public.
• With Your Consent: We may also use your data for any other purpose disclosed to you at the time we collect your data, with your consent, or as otherwise permitted by applicable law.

How We Share Your Information

We may share your personal data with the recipients or in the scenarios listed below for the purposes described in Section 2 above.

• Third-Party AI Providers (Third Party Platforms and Partners): R9S operates as an aggregation platform that routes your API requests to third-party AI model providers (for example, OpenAI, Anthropic, or other providers as you may select). To fulfill your API requests, we share the prompts and related content you submit with the third-party AI model provider you have selected. This sharing is a fundamental and necessary part of providing the Service to you, as without it we would be unable to transmit your requests to the AI model that generates the responses you seek. These third-party providers act as independent data controllers or processors with respect to any data you choose to send through our Service. The privacy practices of those third-party providers are governed exclusively by their own privacy policies and terms of service, and you are solely responsible for reviewing and accepting those policies before using our Service. In the course of our service, please refrain from providing any personal sensitive information or business confidential information. R9S is not responsible for how any third-party AI model provider processes, stores, or uses your data, and any claims regarding the handling of your data by such providers must be directed to the provider, not to R9S.
• Service Providers and Business Partners: We engage service providers and business partners that help us provide, support, and develop the Service. These include cloud infrastructure providers (for hosting and storage), payment processors (for transaction fulfillment), analytics providers (for usage monitoring), customer support platforms, as well as third-party platforms involved in technology research and development, maintenance, and other technical support services for the Service. We share only the information necessary for these entities to perform their functions, and they are contractually bound to protect your data.
• Legal Obligations and Rights: We may access, preserve, and share the information we collect with any competent law enforcement body, regulatory or government agency, court, or other third party if we have a good faith belief that it is necessary to: (i) comply with applicable laws, regulations, legal process, or government requests; (ii) protect the rights, property, and safety of our Service, our users, or the public as required or permitted by law; (iii) enforce our terms and other applicable policies; or (iv) detect, investigate, prevent, or otherwise address fraud, security, or technical issues.
• Corporate Transactions: We may disclose your information in connection with or during negotiations of a merger, consolidation, sale of assets or shares, reorganization, financing, acquisition of all or a part of our business, or in the unlikely event of bankruptcy.
• With Your Consent: We may share your information for other purposes with your consent or at your direction.

International Data Transfers

Your personal data may be stored on secure servers located outside of your country of residence. We may also transfer your information internationally for one or more of the purposes described in this Privacy Policy. Any international transfer of, or access to, your personal data is conducted according to the requirements of applicable data protection laws.

We act as an aggregation platform that routes your API requests to third-party AI model providers (such as OpenAI, Anthropic, or other providers as you may select), such providers may operate servers or process data in jurisdictions outside your country of residence. Accordingly, your personal data - including the prompts and queries you submit - may be transferred to these third-party AI providers and processed in countries where they maintain facilities. These transfers are fundamental to delivering the Service to you, as without them we would be unable to transmit your requests to the AI model that generates the responses you seek. Once your data is transferred to such third-party AI providers, the processing of your data by those providers is governed by their own privacy policies, and you are solely responsible for reviewing and accepting those policies before using our Service.

Data Retention

We retain your personal data for the length of time needed to fulfill the purposes for which it was collected, as set forth in this Privacy Policy. Specifically, account data is retained while your account is active and for a reasonable period thereafter to comply with our contractual and legal obligations (such as tax and record-keeping requirements) and for the establishment or defense of legal claims.

The retention period for specific personal information varies depending on the purpose for which it is used. We will delete your personal information in accordance with applicable laws when no longer required.

Some data can be deleted at any time, some data is automatically deleted, and some data may be retained for extended periods as necessary. When you delete data, we follow our deletion policy to ensure that your data is securely and completely removed from our servers, or retained only in anonymous form.

Information That Is Retained Until You Remove It

In many of the services we provide, you can correct or delete data stored under your R9S account. For example, you can:

• Modify your personal information
• Delete content in your activity history
• Delete content such as API records and documents
• Remove products from your R9S account
• Permanently delete your R9S account

We will retain such data under your R9S account unless you choose to remove it. If you use R9S services without logging into your R9S account, you may also delete certain information associated with the tools you use to access R9S services (such as devices, browsers, or applications).

Data That Auto-Expires

Data Type	Retention Period
API request content (prompts, queries)	Not retained - deleted after transmission
Technical logs (IP address, device info)	Up to 12 months
Usage analytics (aggregated)	Up to 12 months

Data Retained While Your Account Is Active

The following data will be retained for as long as your R9S account remains active to help us improve and personalize the service:

• Your account profile information
• Transaction and financial records
• API usage history

Data Retained Longer as Required by Regulatory Authorities

Pursuant to requirements from regulatory authorities, we may retain certain data for extended periods for the following purposes:

• Ensuring security and preventing fraud and abuse
• Maintaining financial records
• Complying with legal or regulatory requirements
• Ensuring the continuous operation of the service

How We Securely Delete Data

When you delete data, we follow a secure deletion process: we immediately remove the data from view so it is no longer visible or usable for personalization, then perform systematic erasure to securely wipe the data from our active storage systems, and finally rely on natural backup rotation to automatically cycle the data out of encrypted backups over time. The complete secure deletion process typically takes 30 to 60 days, including the recovery period.

Third-Party AI Providers

Once your data is sent to a third-party AI provider, their own privacy policies govern its retention. R9S is not responsible for their practices.

Data Security

The security of your information is important to us. We maintain technical, administrative, and physical security measures designed to protect your information from unauthorized access, theft, disclosure, modification, or loss, and to provide a level of security appropriate to the risk of processing. These measures include encryption in transit (using TLS/SSL protocols) and at rest, access controls, regular security assessments, and secure infrastructure hosted on reputable cloud providers. We regularly review our security measures to consider newly available technology and methods.

However, no method of transmission over the Internet or method of electronic storage is one hundred percent secure. While we strive to protect your personal information, we cannot guarantee its absolute security. Moreover, we are not liable for security breaches or data handling practices caused by third-party AI providers to whom you choose to send data through our Service.

Cookies and Similar Tracking Technologies

We use cookies and similar tracking technologies (collectively, “Cookies”) to operate and provide our Service.

• Essential Cookies: These cookies are necessary for the Service to function properly. They enable core functionality such as authentication, API request routing, and security. You cannot disable these cookies through our Service.
• Functional Cookies: These cookies remember your preferences and settings (such as your login details and selected preferences) to enhance your experience. You may disable these cookies through your browser settings.
• Analytics Cookies: These cookies collect aggregated usage data to help us understand how users interact with our Service, such as pages visited and API call frequency. We use tools such as Google Analytics for this purpose. You may disable these cookies through your browser settings.
• Security Cookies: These cookies are used to detect fraud, abuse, and unauthorized access attempts. You cannot disable these cookies through our Service.

Some cookies are placed by third-party service providers we engage, including cloud infrastructure providers and analytics providers. These third parties may collect data about your online activities over time and across different websites. We do not control their cookie practices. You may manage your cookie preferences through your browser settings; however, disabling essential cookies will prevent the Service from functioning properly.

Your Rights and Choices

Depending on where you live, you may have certain rights with respect to your personal data, such as a right to know and be informed about how we collect and use your data. You may also have the right to access, update, rectify, restrict the processing of, and delete your personal data in our possession; to opt out of and withdraw your consent for certain processing activities; to file complaints with competent supervisory authorities; and more. Some of your rights apply generally, while others will apply only in certain circumstances. Depending on the scenario, these rights may also be subject to limitations under applicable law.

To exercise any of these rights, please submit your request to support@r9s.ai. We will process your request in accordance with applicable laws. Please note that depending on the nature and scope of your request, we may not be in a position to continue the provision of the Service to you, and in such circumstances we will notify you before completing your request.

If you have opted in to receive marketing emails from us, you may opt out at any time by using the “unsubscribe” link or mechanism included at the bottom of each such email.

Minimum Age

Our Service is intended for use on a business-to-business basis and is not directed at individuals below the age of eighteen (18) years. If you are below eighteen (18) years of age, you must not use the Service.

Updates to This Privacy Policy

We may amend or update this Privacy Policy from time to time. When we do so, we will revise the “Last Updated” date at the top of this Privacy Policy and, where required by applicable law, provide additional or alternative notice (for example, by email or a prominent notice on our website). We recommend that you regularly review this page to stay informed of our privacy practices. Your continued use of the Service after the “Last Updated” date constitutes your acceptance of the revised Privacy Policy.

Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy, please contact us at:

Email: support@r9s.ai