AI router gateway
Terms Privacy Sign In
Privacy & Data Protection • OpenAI API Standards

Privacy Policy

This Privacy Policy explains how AI router gateway, our gateway infrastructure, and connected plugins (including AI SEO Autopilot) process, protect, and transmit data when communicating with artificial intelligence APIs.

Effective Date: January 1, 2026 • Last Revised: October 28, 2026

1 Introduction & Scope

We respect your privacy and are committed to safeguarding your personal data and application inputs. This Privacy Policy outlines our data collection, processing, and retention policies across:

  • The AI router gateway platform and administration dashboard.
  • The OpenAI-compatible proxy and routing endpoints (/v1/chat/completions, /v1/models).
  • Client plugins and extensions, including AI SEO Autopilot for WordPress.
  • License verification and feature quota management services.
2. OpenAI API Data Handling & Model Training Disclaimer

Our gateway routes completion requests to OpenAI, LLC (“OpenAI”) using official commercial API agreements. Under these agreements:

✓
NO MODEL TRAINING: OpenAI does not use data submitted via our API connections to train or fine-tune OpenAI models (such as GPT-4o or future iterations). Your proprietary content, website articles, and prompts remain private.
✓
LIMITED RETENTION (30 DAYS): As required by OpenAI’s global safety architecture, OpenAI stores API inputs and outputs for up to 30 days solely for the purpose of identifying abuse, monitoring misuse, and regulatory compliance. Following this period, API content is permanently purged from OpenAI systems.
✓
ENCRYPTED DATA IN TRANSIT: All communications between your server, our gateway, and OpenAI endpoints are encrypted using industry-standard TLS 1.3 / HTTPS.

3 Information We Collect & Process

A. Account & License Data

Client names, administrative email addresses, license tiers (Pro, Agency, Enterprise), expiration dates, and assigned quota allowances.

B. Domain & Activation Metadata

Connected website URLs (e.g. your WordPress domain), plugin version, activation timestamps, and IP addresses for domain slot validation.

C. Inference & Routing Metadata

Selected model ID, token usage counts (prompt & completion tokens), latency metrics, HTTP status codes, and quota deduction logs.

D. Ephemeral Prompt Content

Text submitted for SEO optimization, title suggestions, or reasoning. Streamed real-time to the client; not permanently archived in raw form on disk.

4 How We Use Collected Information

We use the data collected strictly for legitimate operational purposes:

  • To route incoming API requests to OpenAI and designated language model providers.
  • To verify WordPress plugin licenses, enforce domain slot limits, and manage daily quota resets.
  • To calculate aggregate token consumption and provide analytics in client dashboards.
  • To detect and prevent malicious abuse, automated DDoS attempts, or credential stuffing.

5 Third-Party Subprocessors

We work with trusted third-party service providers to deliver our services:

Subprocessor Role / Purpose Location Data Safeguards
OpenAI, LLC AI Language Model Processing (API) United States Zero-Training API Agreement • 30-day purge
Cloud Infrastructure Encrypted Gateway & Hosting Global / USA / EU ISO 27001 • SOC 2 Type II Certified

6 Security & Secret Management

We employ defense-in-depth security mechanisms to protect your API keys, credentials, and customer data:

  • Zero API Key Exposure: Plugin licenses (e.g. HEXSEO-...) validate through proxy signatures. Upstream OpenAI API keys are never exposed to connected WordPress client browsers or public scripts.
  • Encrypted Transport: Mandatory HTTPS / TLS 1.3 encryption across all inbound and outbound endpoints.
  • Role-Based Access: Database credentials, admin panels, and provider settings are restricted to authenticated administrators.

7 Your Rights & Data Deletion

Under applicable privacy laws (including GDPR and CCPA), you have the right to request access to the data associated with your license or account, request correction of inaccuracies, or request permanent deletion of your connected domain registrations and log history.

To request data export or deletion, contact our privacy officer at [email protected].

8 Contact & Policy Updates

We may update this Privacy Policy from time to time to maintain alignment with OpenAI API policies and evolving regulatory requirements. Changes become effective upon posting.

Inquiries & Privacy Support: [email protected] / [email protected]
Official Policy References: OpenAI Privacy Policy • OpenAI Enterprise Privacy & Data Protection