airctrl
legal

Privacy Policy

Your data, kept in the tower. This policy describes what we collect and how we protect it across the AIRCTRL gateway.

Last updated: July 1, 2026

1. Overview

This Privacy Policy explains how AIRCTRL (“airctrl”, “we”, “us”, or “our”), a Theovex company, collects, uses, and safeguards information when you use our websites, APIs, and related services (the “Services”). By using the Services, you agree to the practices described here.

2. Information we collect

We collect the following categories of information:

  • Account information, such as your name, email address, and organization details.
  • Usage data, such as requests routed through the gateway, model and provider metadata, timestamps, and aggregate spend.
  • Technical data, such as IP address, device and browser information, and diagnostic logs.

3. Secrets and credentials

AIRCTRL acts as a secrets manager and gateway. Provider API keys and environment variables you store are encrypted in transit and at rest and are used solely to route your requests. We do not sell your credentials and do not use the contents of your prompts or secrets to train models.

4. How we use information

We use information to operate, maintain, and improve the Services; authenticate users; route and govern AI traffic; enforce spend limits; provide support; ensure security; and comply with legal obligations.

5. Sharing and disclosure

We share information with third-party model providers only as needed to fulfill your requests, and with service providers who process data on our behalf under appropriate confidentiality obligations. We may disclose information when required by law or to protect our rights and users.

6. Data retention

We retain information for as long as your account is active or as needed to provide the Services, resolve disputes, and comply with our legal obligations. You may request deletion of your account data as described below.

7. Security

We use administrative, technical, and organizational measures designed to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and where appropriate we will provide additional notice.

10. Contact

Questions about this policy can be sent to privacy@airctrl.dev.

This document is a general template provided for informational purposes only and does not constitute legal advice. Have it reviewed by qualified legal counsel before relying on it in production.