PRIVACY.

1. Who we are

This Privacy Policy explains how Switchlo, operating out of India ("Switchlo", "we", "us") collects, uses, and shares information when you use the Switchlo API router and dashboard (the "Service"). It's meant to be read together with our Terms of Service.

2. Information we collect

Account information. When you sign up, we collect your email address and authentication credentials via Supabase, our authentication provider.

Provider connections. If you connect your own API key for a third-party model provider (Groq, Cerebras, Gemini, etc.), we store that key encrypted at rest and use it solely to make requests on your behalf, to the provider you specified.

Request metadata. Each time you call our API, we log metadata about the request — which model was requested, which provider ultimately handled it, latency, token counts, estimated cost, and success/error status. We do not store the content of your prompts or the model's completions. That content is transmitted directly to the third-party provider you've connected and is subject to that provider's own privacy policy and data handling practices — Switchlo has no visibility into or control over how the provider itself retains or uses it.

Billing information. If you subscribe to a paid plan, payment is handled entirely by Paddle.com, our payment processor and merchant of record. We do not receive or store your card details — Paddle passes us only your subscription status, plan, and renewal date, which we use to enforce your plan's usage limits.

3. How we use this information

• To operate the Service — authenticating you, routing your requests, enforcing rate limits and plan quotas
• To show you your own usage, cost, and savings analytics in the dashboard
• To detect abuse and enforce our Terms of Service
• To communicate with you about your account, billing, or material changes to the Service

We do not sell your personal information, and we do not use it for advertising.

4. Who we share information with

We share information only with the third parties needed to run the Service:

• Supabase — authentication and database hosting
• Paddle — payment processing and subscription billing
• The LLM provider(s) you connect (Groq, Cerebras, Google Gemini, or others) — receives your prompt content directly, as the party actually generating the completion
• Our hosting providers (Vercel for the dashboard, Render for the API) — infrastructure only

We don't share your information with anyone else, except where required by law or to protect our legal rights.

5. Data retention

We keep request metadata and account information for as long as your account is active, so that dashboard analytics and billing remain accurate. If you delete your account, we'll delete or anonymize this data within a reasonable period, except where we're required to retain it (for example, billing records for tax or legal compliance).

6. Your rights

You can access, correct, or delete your account information at any time from your dashboard, or by contacting us directly. Depending on where you live, you may have additional rights under local law (for example, the right to request a copy of your data, or to object to certain processing) — contact us and we'll accommodate reasonable requests.

7. Security

Provider API keys are encrypted at rest. Access to the database is restricted via row-level security so that you can only see your own data. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable technical measures to protect your information.

8. Children's privacy

The Service isn't directed at children, and we don't knowingly collect information from anyone under 18. If you believe a child has provided us information, contact us and we'll delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above, and for material changes, make reasonable efforts to notify active users.

10. Contact

Questions about this policy or your data? Reach us at switchlosupport@gmail.com.