Privacy Policy

1. Who we are

AcruxCore (“AcruxCore”, “we”, “us”) provides an LLM-ops platform that lets teams version prompts, route model calls through a gateway, trace requests, and evaluate quality. This policy covers information handled when you use the hosted service at acruxcore.com and related sites. If you self-host AcruxCore, you are the controller of the data in your own deployment and this policy does not apply to it.

For the hosted service, AcruxCore is the controller of the personal data described below. You can reach us about anything in this policy — including a data-protection request — at [email protected].

2. Information we collect

• Account information — your name, email address, team details, and authentication data when you sign up.
• Content you send to the platform — prompts, tool definitions, API keys you create, and provider credentials you connect. Provider credentials and secrets are encrypted at rest.
• Operational data — trace metadata such as model, token counts, latency, and cost for calls routed through the gateway. Full request and response payloads are stored only when your team enables payload capture.
• Usage and device data — log data, IP address, and basic analytics needed to operate and secure the service.

3. Cookies and analytics

We use Google Analytics 4 to understand traffic to our website and dashboard — pages visited, referral source, and basic device/location data. This sets an analytics cookie in your browser, but only after you accept it in the cookie banner shown on first visit; declining, or taking no action, keeps that cookie switched off. You can change your choice at any time from the "Cookie preferences" link in the site footer. This consent is shared across acruxcore.com and docs.acruxcore.com, so you are not asked twice. We do not use cookies for advertising.

4. How we use information

• To provide, maintain, and improve the platform.
• To authenticate users and enforce team-level access.
• To route, price, and record the model calls you send through the gateway.
• To monitor for abuse, secure the service, and meet legal obligations.
• To communicate with you about your account and service changes.

5. Model providers

When you route a call through the gateway, the content of that call is sent to the model provider you selected, using the keys you connected, so the provider can generate a response. That processing is governed by the provider's own terms and privacy policy. We do not use your prompts or completions to train models.

6. Sharing

We do not sell your personal information. We share it only with service providers who help us run the platform (for example, hosting and infrastructure), under confidentiality obligations; when required by law; or as part of a business transfer, in which case we will notify you. Model providers receive only the calls you choose to route to them.

7. Retention

We keep account and content data for as long as your account is active and as needed to provide the service. Trace and operational data are retained according to your team's settings and our standard retention windows. You can delete resources you created at any time; deleting your account removes associated data, subject to backups and legal requirements.

8. Security

We protect data in transit with TLS and encrypt secrets and provider credentials at rest, with team-level isolation across the platform. See our security page for more detail and how to report a vulnerability.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected].

10. Changes

We may update this policy from time to time. Material changes will be posted here with an updated date, and where required we will notify you directly.

11. Contact

Questions about privacy? Email [email protected] or visit our contact page.