Privacy Policy

We collect the information needed to operate the Services and your account: your email address and OAuth identity from your chosen sign-in provider; usage and billing records, including which capabilities you call, when, and the resulting charges; and, for fraud and abuse prevention, network information such as IP address and a device fingerprint.

When you add credit, your payment card details are collected and processed solely by our payment processor, Stripe. We do not receive or store your full card number.

By default we do not retain the content of your API requests or the responses returned to you; this content is processed in transit to fulfil the request and is not stored unless you explicitly opt in to storage. We never use your request or response content to train models.

We use the information we collect to provide and operate the Services (routing your requests and returning results); to meter usage, calculate charges and process payments; and to maintain the security and integrity of the platform, including detecting and preventing fraud, abuse and violations of our acceptable-use policy.

We currently send only transactional and service emails — messages that are necessary to operate your account, such as sign-in one-time codes, billing receipts, and low-balance and other account alerts. While you hold an account, these emails are not subject to unsubscribe, because they are required to provide the Services; sending them is permitted under anti-spam laws such as CAN-SPAM and PDPA.

We do not currently send marketing or promotional email. If we introduce marketing email in the future, it will be opt-in, you will be able to subscribe and unsubscribe at any time, and every marketing message will include a one-click unsubscribe link.

We share information only as needed to provide the Services. To fulfil a request, the content of that request is transmitted to the third-party vendor you route to (or the default vendor for that capability), in the region we disclose. We share billing information with our payment processor, Stripe, to process payments. We may disclose information where required by law. We do not sell your personal data.

Where you process the personal data of your end users through the Services, infrai acts as a processor on your behalf, as described in our Terms of Service. Account passwords are never stored in plaintext; where password credentials exist they are stored only as argon2id hashes.

We retain billing and usage records for as long as needed to operate your account and to meet legal, tax and accounting obligations. When you delete your account, your account data is permanently deleted, subject to records we are required to retain by law.

legal.privacy.s8_body

We protect data with tenant isolation between accounts, hashing of credentials, key management for secrets (KMS), and audit logging of administrative actions. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices.

You can access your account information and export your data from the console. To delete your account, use the self-service flow in Settings → Close account described in Section 8 (Account deletion). Depending on your jurisdiction, you may have additional rights regarding your personal data; you can exercise these by contacting us at support@infrai.cc.

We use a single HTTP-only session cookie to keep you signed in. We do not use advertising cookies or third-party tracking, and we do not build advertising profiles.

We may update this Privacy Policy from time to time; for material changes we will provide notice by email and on this page before they take effect. Questions about this policy or your data may be sent to support@infrai.cc.