Privacy Policy

1. Personal Data We Collect

The information we collect depends on how you use the Services.

1.1 Account Information

When you create or manage a Fluxlane account, we may collect:

• Email address;
• Username or account name;
• Password credentials, stored in hashed form;
• Organisation or company information that you choose to provide;
• Account status and related account information; and
• Other information you voluntarily provide to us.

1.2 Billing and Transaction Information

If you purchase credits or other Services from us, we may collect:

• Billing name and company information;
• Billing and invoice information;
• Transaction records;
• Payment status;
• Credit or balance information; and
• Limited payment information provided by our payment processors.

Where payments are processed by third-party payment providers such as Stripe, payment card numbers and other full payment credentials are processed by those providers rather than stored directly on Fluxlane's systems.

We may retain transaction and billing records for accounting, tax, fraud prevention, dispute resolution, and other legitimate business or legal purposes.

1.3 API and Service Usage Information

When you use the Fluxlane API, we may collect technical and operational information such as:

• API key identifiers;
• Model requested;
• Request timestamp;
• Token and quota consumption;
• Request and response status codes;
• Latency and performance information;
• IP address;
• User agent;
• Error information;
• Rate-limit information; and
• Other information reasonably necessary to operate, secure, monitor, and support the Services.

We do not need to store the secret value of an API key after it has been securely provided to you, except where necessary to operate the relevant functionality.

1.4 Customer Content

When you use the Fluxlane API, you may submit information to an upstream AI model through our Services. This may include:

• Text prompts;
• Code;
• Files;
• Images;
• Audio;
• Other inputs submitted to an AI model; and
• Outputs generated in response to those inputs.

We refer to this information collectively as "Customer Content".

Customer Content may contain personal data if you choose to include personal data in your requests.

You are responsible for ensuring that you have the appropriate rights, permissions, and legal basis to submit Customer Content to the Services.

1.5 Communications

We may collect information contained in communications you send to us, including:

• Support requests;
• Privacy requests;
• Emails;
• Feedback;
• Business enquiries; and
• Other communications with Fluxlane.

1.6 Website and Cookie Information

When you visit our public website, we may collect information such as:

• Pages visited;
• Referring URLs;
• Browser and device information;
• Approximate location derived from IP address;
• Website interaction information;
• Cookies and similar identifiers; and
• Analytics information.

We may use analytics and website-management technologies, including Google Tag Manager and other analytics services, to understand how visitors use our website and to improve the Services.

You can control or disable cookies through your browser settings. Disabling certain essential cookies may affect the functionality of the website or Services.

2. How We Collect Personal Data

We collect personal data through:

Directly from you

For example, when you:

• Create an account;
• Update account information;
• Purchase credits or Services;
• Contact us;
• Submit a support request; or
• Make API requests.

Automatically

For example, when you:

• Visit our website;
• Sign in to the console;
• Use our API; or
• Interact with our Services.

This may include technical logs, IP addresses, cookies, and service usage information.

From service providers

We may receive information from third parties that help us operate the Services, such as payment processors, hosting providers, infrastructure providers, email providers, security services, and other technology providers.

3. How We Use Personal Data

We may use personal data for the following purposes:

• To create and manage accounts;
• To authenticate users;
• To issue, manage, and secure API keys;
• To provide and operate the Services;
• To route API requests to the applicable AI model provider;
• To return model responses to users;
• To measure API usage and token consumption;
• To enforce quotas and rate limits;
• To process payments and maintain billing records;
• To provide customer support;
• To diagnose errors and technical problems;
• To monitor system performance;
• To prevent fraud, abuse, attacks, and unauthorised access;
• To maintain the security and integrity of our systems;
• To communicate with you about your account, security, billing, and the Services;
• To understand and improve our website and Services;
• To comply with applicable laws and regulations;
• To establish, exercise, or defend legal claims; and
• To protect the rights, property, safety, and security of Fluxlane, our users, and others.

Where required by applicable law, we will obtain consent before collecting, using, or disclosing personal data. We may also process personal data where permitted or required by applicable law without consent.

4. Customer Content and AI Model Providers

Fluxlane provides an API gateway that allows users to access AI models provided by third-party model providers.

When you submit a request through Fluxlane, the request may be transmitted to the applicable upstream AI model provider in order to provide the requested service.

For example, a request submitted to a particular model through Fluxlane may need to be transmitted to the provider responsible for serving that model.

4.1 Upstream Processing

The applicable AI model provider may process Customer Content in accordance with its own terms, documentation, and privacy practices.

The way an upstream provider handles Customer Content may differ between providers and may change over time.

You should review the applicable provider's terms and privacy documentation when using a particular model.

4.2 Fluxlane's Use of Customer Content

Fluxlane does not sell Customer Content.

We do not use Customer Content for advertising.

We do not intentionally use Customer Content to train our own AI models.

We may process and retain Customer Content to the extent reasonably necessary to:

• Provide the requested API service;
• Maintain and operate the Services;
• Detect and investigate security incidents;
• Prevent abuse or misuse;
• Diagnose technical problems;
• Provide customer support;
• Comply with legal obligations; or
• Protect our rights and the security of the Services.

4.3 Your Responsibilities

You are responsible for the information you submit through the Services.

You should not submit sensitive personal information, confidential information, regulated data, or other information that you are not authorised to disclose unless the relevant use is permitted and appropriate safeguards are in place.

If you use Fluxlane on behalf of an organisation, you represent that you are authorised to do so and that the organisation has the appropriate rights and permissions for the data submitted through the Services.

5. Service Providers and Disclosure of Personal Data

We may disclose personal data to third parties where reasonably necessary to operate the Services or for the purposes described in this Policy.

These third parties may include:

• AI model providers;
• Payment processors;
• Cloud and hosting providers;
• Database and infrastructure providers;
• Content-delivery and network providers;
• Email and communication providers;
• Security and monitoring providers;
• Error monitoring and technical service providers;
• Professional advisers, including legal, accounting, and financial advisers; and
• Government authorities or regulators where required or permitted by law.

We may also disclose information in connection with a merger, acquisition, financing, restructuring, sale of assets, or other corporate transaction involving Fluxlane.

We do not sell personal data to third parties.

We seek to require relevant service providers to protect personal data appropriately and to process it only for legitimate purposes connected with the Services or their relationship with Fluxlane.

6. International Data Transfers

Fluxlane is incorporated in Singapore.

Some of our service providers and upstream AI model providers may operate or process information outside Singapore.

As a result, personal data may be transferred to and processed in countries outside Singapore.

Where personal data is transferred outside Singapore, we take steps required under applicable data protection laws to ensure that the transferred personal data receives a standard of protection comparable to that required under the Singapore PDPA, including contractual or other appropriate safeguards where applicable.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to:

• Provide the Services;
• Maintain account information;
• Maintain billing and transaction records;
• Detect and investigate security incidents;
• Resolve disputes;
• Enforce our agreements;
• Comply with accounting, tax, regulatory, and legal obligations; and
• Protect the security and integrity of our Services.

Different categories of information may be retained for different periods.

We do not retain personal data indefinitely where it is no longer reasonably required for a business or legal purpose.

When personal data is no longer required, we may delete, anonymise, or securely isolate it in accordance with our applicable retention practices.

Because Fluxlane is an API gateway, certain technical and usage records may need to be retained for a period of time to maintain billing accuracy, security, abuse prevention, troubleshooting, and service reliability.

8. Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, collection, use, disclosure, alteration, or destruction.

Depending on the nature of the information and the Services involved, these measures may include:

• Network access controls and firewalls;
• Separation of public-facing and backend services;
• Separation of application and database environments;
• Access controls for production systems;
• Encryption in transit where appropriate;
• Password hashing;
• API authentication and access controls;
• Logging and monitoring;
• Least-privilege access where reasonably practicable; and
• Measures designed to detect and prevent unauthorised access and abuse.

However, no method of transmission, storage, or electronic security is completely secure.

You are responsible for protecting your account credentials and API keys and should not disclose API keys to unauthorised persons.

If you believe that your account or API key has been compromised, you should immediately revoke the affected key and contact us.

9. Data Breach

If Fluxlane becomes aware of a data breach involving personal data, we will assess the incident and take appropriate steps in accordance with applicable law.

Where applicable law requires notification to affected individuals or regulators, we will make the required notifications within the applicable timeframes.

We may also take measures such as restricting access, revoking credentials, investigating the incident, and implementing remedial measures.

10. Your Rights and Choices

Subject to applicable law and relevant exceptions, you may have rights to:

• Request access to personal data that we hold about you;
• Request information about how we have used or disclosed your personal data;
• Request correction of inaccurate or incomplete personal data;
• Withdraw consent where we rely on consent as the legal basis for processing;
• Request deletion or cessation of processing where applicable under relevant law; and
• Close your Fluxlane account.

Withdrawing consent does not affect processing that we are permitted or required to continue under applicable law.

Depending on the nature of your request, withdrawing consent or deleting certain information may affect our ability to continue providing some or all of the Services.

You may also:

• Update certain account information through the Fluxlane console;
• Revoke API keys that you no longer need; and
• Manage cookies through your browser settings.

We may need to verify your identity before processing certain privacy requests.

11. Data Protection Officer

Fluxlane has designated a person responsible for overseeing data protection matters and handling privacy-related enquiries.

For privacy questions, access requests, correction requests, consent withdrawal requests, or complaints relating to personal data, please contact:

Data Protection Officer
FLUX LANE PTE. LTD.
Email: [email protected]

We will consider and respond to privacy requests within the timeframe required by applicable law or, where no specific timeframe applies, within a reasonable period.

If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore (PDPC) or the relevant data protection authority applicable to your circumstances.

12. Children

The Services are not directed to children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal data to Fluxlane, please contact us at:

[email protected]

We will take reasonable steps to investigate and, where appropriate, delete the relevant information.

13. Third-Party Websites and Services

The Services may contain links to third-party websites, documentation, AI model providers, payment providers, or other services.

Those third parties operate under their own terms and privacy policies.

Fluxlane is not responsible for the privacy practices of third-party services that we do not control.

We recommend reviewing the applicable third party's privacy policy before providing personal data or Customer Content to that service.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, legal requirements, or data protection practices.

The updated version will be published at:

https://www.fluxlane.ai/privacy-policy

The "Last Updated" date at the beginning of this Policy will indicate when the Policy was most recently revised.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

15. Contact Us

If you have questions about this Privacy Policy or how Fluxlane handles personal data, please contact us.

FLUX LANE PTE. LTD.

Email: [email protected]

Website: https://www.fluxlane.ai

For data protection matters, you may also contact our Data Protection Officer at:

[email protected]