Privacy Policy

Information We Collect

We collect information that you provide directly to us, as well as information generated through your use of the Service:

• Account information: When you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign up via Google OAuth, we receive your name and email from Google.
• Billing information: When you subscribe to a paid plan, your payment details (credit card number, billing address) are collected and processed directly by our payment processor, Stripe. We do not store your full credit card number on our servers.
• API usage data: We log API requests including timestamps, request parameters, response status codes, and the amount charged. Address data submitted for route optimization is processed and stored temporarily to fulfill your request.
• Device and access information: We collect IP addresses, browser type, and access timestamps for security monitoring and rate limiting purposes.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service, including processing route optimization requests and delivering results via API responses or webhooks
• To manage your account, process payments, track spending, and enforce plan limits
• To communicate with you about your account, including service updates, security alerts, and billing notifications
• To monitor and analyze usage patterns to improve the performance, reliability, and security of the Service
• To detect, prevent, and address fraud, abuse, and technical issues
• To comply with legal obligations and enforce our Terms of Service

Data Storage and Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• API keys are stored as SHA-256 hashes. The raw key is shown to you only once at creation and is never persisted in our systems.
• All data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted in our database.
• Optimization requests, addresses and results stay in your account until you delete them. Deleting an optimization through the API removes it permanently.
• We use defense-in-depth authentication with multiple verification layers to prevent unauthorized access.

Third-Party Services

We share your information with the following third-party services that are essential to operating our Service:

• Stripe: Processes payments and manages subscriptions. Stripe receives your billing information directly and is subject to their own Privacy Policy.
• Route4Me: Our route optimization engine. Address data is transmitted to Route4Me for processing. Route4Me does not retain your data beyond what is necessary to fulfill the optimization request.
• Vercel: Hosts our application infrastructure. Subject to Vercel's Privacy Policy.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can request that we correct inaccurate or incomplete data.
• Deletion: You can request that we delete your account and associated data. Note that some data may be retained as required by law or for legitimate business purposes.
• Data portability: You can request your data in a structured, machine-readable format.
• Opt-out: You can opt out of non-essential communications at any time.

To exercise any of these rights, please contact us at the address below.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@r4m.ai.