Privacy Policy

1. Scope and our role

Routant provides infrastructure that connects AI agents to applications, databases, and private APIs with access controls, approvals, and activity records. This policy covers information we handle to operate our business and services.

When a customer uses the platform to process personal information on its behalf, that customer determines the purposes of that processing. We handle that information under the applicable customer agreement and instructions. If your information is managed through your employer or another organization, contact that organization first about its use of your information. This policy does not replace any applicable data processing agreement.

2. Information we collect

• Contact information: information you send us in inquiries, correspondence, or support requests, such as your name, work email, company, country, and message.
• Account and organization information: email address, profile details, authentication identifiers, organization membership, roles, and account settings.
• Service information: configurations for agents, resources, gateways, permissions, and approvals; identifiers and activity records associated with requests, policy decisions, and administrative actions. Depending on the connected resource and configuration, requests and responses may also contain personal information.
• Technical information: information generated when you access the website or service, such as IP addresses, browser and device information, request timestamps, authentication events, and diagnostic or security logs.

We receive information directly from you, from administrators or other authorized users of your organization, from connected systems you authorize, and through the operation of our services. Please do not send passwords, private keys, or unnecessary sensitive personal information in general inquiries.

3. How we use information

We use information to provide and maintain the services; authenticate users; administer organizations and access permissions; route authorized requests; support policy checks, approvals, and activity records; respond to inquiries; troubleshoot problems; protect against abuse; and meet legal obligations.

We also use relevant information to communicate about your account, service changes, and our business relationship. If we send optional marketing communications, you can opt out using the instructions in the message or by contacting us. Essential account and security communications may still be sent.

Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests such as operating and securing our business, compliance with legal obligations, or consent where required. You may withdraw consent without affecting processing that occurred before withdrawal.

4. When information is shared

• Service providers: providers supporting functions such as hosting, authentication, infrastructure, and business communications, as needed to perform those functions. Our application uses Google Firebase for authentication.
• Your organization and authorized connections: administrators and authorized users may access information associated with their organization. Requests and data may be shared with resources or services that you or your organization choose to connect, subject to the relevant configuration and permissions.
• Legal and security purposes: when reasonably necessary to comply with law or valid legal process, protect rights and safety, investigate abuse, or enforce applicable agreements.
• Business transfers: in connection with a merger, financing, acquisition, reorganization, or sale of business assets, subject to applicable confidentiality and data protection requirements.
• At your direction: when you request or authorize a disclosure.

We do not sell personal information or share it for cross-context behavioral advertising. Displaying an integration logo on our website does not itself send your personal information to that integration provider.

5. Cookies and browser storage

Our services use cookies or similar browser storage where needed for authentication, session management, and service functionality. You can manage cookies and site storage through your browser settings, although blocking or clearing them may affect sign-in and other features.

We do not use personal information for targeted advertising. The website does not change its behavior in response to a browser’s Do Not Track signal.

6. Retention and security

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining appropriate security and activity records, resolving disputes, and complying with legal obligations. Retention depends on the type of information, the customer relationship, applicable agreements, and legal requirements.

We use authentication and access controls to help protect information. No method of transmission or storage is completely secure. You are responsible for protecting your account credentials and configuring access appropriately. Deletion requests may be subject to legal retention requirements and the time needed for backup copies to expire through normal retention processes.

7. Your choices and privacy rights

Depending on your location and applicable law, you may have rights to access or obtain a copy of your personal information, correct inaccuracies, request deletion, restrict or object to processing, obtain data portability, or withdraw consent. You may also have the right to complain to your local data protection authority or appeal a decision about a privacy request.

To make a request, email support@alphadilabs.ai and describe what you would like to do. We may need information to verify your identity or your authority to act for someone else. We will respond within the time required by applicable law and explain any applicable limitations. We will not discriminate against you for exercising your privacy rights.

For information controlled by a customer organization, we may direct your request to that organization or assist it in responding under our agreement with it.

8. International processing and third parties

Information may be processed in countries other than the one where you live, including countries where our service providers operate. These countries may have different data protection laws. Where applicable law requires safeguards for international transfers, those requirements apply to our handling of the information.

Third-party websites, applications, and connected systems have their own privacy practices. This policy covers Routant and does not govern those third parties.

9. Children

Our services are intended for business use by adults and are not directed to children under 18. We do not knowingly collect personal information directly from children under 18. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

10. Changes and contact

We may update this policy as our services or practices change. The date at the top identifies the latest revision. We will provide additional notice of material changes where required by law.

For privacy questions or requests, contact Routant at support@alphadilabs.ai.