Privacy Policy

Direxis, Inc. ("Direxis," "we," "us," or "our") provides AI inference APIs, developer tools, dashboards, and related services (collectively, the "Service").

This Privacy Policy explains what information we collect, how we use and disclose it, how we handle prompts and model outputs, and the choices available to you.

This Privacy Policy applies when you use the Service directly or when Direxis provides inference through an authorized integration, platform, marketplace, or other partner.

1. Information We Collect

Account and Identity Information

When you create or manage a Direxis account, we may collect:

• Name
• Email address
• Organization or company name
• Organization membership and role information
• Account and authentication identifiers

We use third-party authentication providers, including Clerk, to help manage authentication and sessions.

Billing Information

When you purchase credits or otherwise pay for the Service, we may collect:

• Transaction amounts and dates
• Credit balances
• Payment status
• Billing history
• Limited payment-method metadata, such as card brand and last four digits

Payment card information is submitted directly to our payment processor, Stripe. Direxis does not receive or store full payment card numbers.

API Inputs and Outputs

When you use an inference endpoint, we process the prompts, messages, images, files, or other content you submit to the Service ("Inputs") and the responses generated by the applicable model ("Outputs") as necessary to provide the requested inference.

For Direxis-hosted inference endpoints:

• We do not use Inputs or Outputs to train or fine-tune models.
• We do not sell Inputs or Outputs.
• We do not persistently store Inputs or Outputs after the inference request has been completed.

Inputs and Outputs may exist transiently in memory, network buffers, or other temporary systems while a request is being processed and returned to you. This transient processing does not constitute persistent retention.

If a particular product or endpoint has different data-handling practices, we will disclose those practices before or at the time you use that product or endpoint.

Usage and Request Metadata

We may collect operational metadata about API requests, including:

• Model requested
• Input and output token counts
• Request and response timestamps
• Request duration and latency
• HTTP status and error codes
• Rate-limit information
• Geographic or datacenter routing information
• Amount charged or credited
• API key, account, organization, or partner identifiers associated with a request

This metadata does not include the content of your Inputs or Outputs.

We use this information for billing, capacity planning, reliability monitoring, abuse prevention, debugging, and performance measurement.

Security and Technical Information

When you access our website, dashboard, or APIs, we and our service providers may receive standard technical information, such as:

• IP address
• Browser and device information
• Operating system
• Request timestamps
• Authentication and session information
• Security and fraud signals

We may also maintain account activity logs relating to events such as sign-ins, API-key creation or revocation, billing changes, and organization changes.

Support and Communications

If you contact us, we may collect the information you provide in your message, including your name, email address, company information, and the contents of the communication.

Information Received Through Partners

If you access Direxis through an authorized marketplace, API gateway, integration, reseller, or other partner, we may receive information necessary to process and account for your requests, such as:

• A pseudonymous customer or request identifier
• Model selection
• Token usage
• Request metadata
• Billing or routing information

The partner may separately collect or process information under its own privacy policy. Direxis does not control the partner's independent data practices.

2. How We Use Information

We use information described in this Privacy Policy to:

• Provide, maintain, and operate the Service
• Authenticate users and manage accounts and organizations
• Process inference requests and return Outputs
• Meter API usage and calculate charges
• Process payments, credits, refunds, and auto-recharges
• Operate usage dashboards
• Monitor latency, throughput, capacity, and reliability
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Enforce rate limits and our Terms of Service
• Diagnose technical problems
• Respond to customer support requests
• Send transactional and service-related communications
• Comply with legal and regulatory obligations
• Develop and improve the performance and reliability of our infrastructure using operational and aggregate information that does not contain prompt or completion content

We do not use personal information or API content for third-party advertising.

We do not sell personal information.

We do not share personal information for cross-context behavioral advertising.

3. AI Training and Inference Data

No Training on Customer Content

Direxis does not use customer Inputs or Outputs to train or fine-tune models.

We also do not authorize service providers acting on our behalf to use customer Inputs or Outputs for their own model training.

Zero Data Retention for Direxis-Hosted Inference

For Direxis-hosted inference endpoints, Inputs and Outputs are processed for the duration necessary to perform inference and deliver the response and are not persistently retained by Direxis after completion of the request.

We may retain non-content request metadata, such as token counts, model identifiers, latency, status codes, and billing information.

Third-Party or Partner Services

Certain features may involve services operated by another provider or may be accessed through a third-party marketplace or integration.

When another party independently processes your data, its privacy policy and data practices may also apply. Where an inference endpoint has data practices that differ from the Direxis-hosted policy above, we will disclose those practices for that endpoint where applicable.

4. How We Share Information

We disclose information only as reasonably necessary to operate the Service, comply with law, protect the Service, or complete a transaction you request.

Service Providers

We use service providers to perform functions on our behalf. These currently include services such as:

• Clerk — authentication and session management
• Stripe — payment processing
• Vercel — application and web hosting
• Neon — database infrastructure
• Cloud, compute, datacenter, and network infrastructure providers — operation of the infrastructure used to deliver the Service

These providers may process information only as necessary to provide their services to Direxis and subject to applicable contractual, technical, and organizational protections.

Authorized Partners and Marketplaces

If the Service is accessed through an authorized integration, marketplace, reseller, or other partner, we may exchange operational, usage, billing, and routing information with that partner as necessary to provide and account for the Service.

We do not provide customer prompt or completion content to a partner after inference except where necessary to return the requested response or where you have separately requested or authorized such processing.

Legal Requirements and Protection

We may disclose information if we reasonably believe disclosure is required to:

• Comply with applicable law, regulation, legal process, or governmental request
• Protect the rights, property, or safety of Direxis, our customers, or others
• Detect or prevent fraud, abuse, or security incidents
• Enforce agreements applicable to the Service

Where legally permitted, we will seek to limit disclosures to information reasonably necessary for the applicable purpose.

Business Transactions

If Direxis is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, information may be transferred as part of that transaction, subject to applicable law.

5. Data Retention

We retain different categories of information for different periods based on the purpose for which the information is processed.

Inputs and Outputs

For Direxis-hosted inference endpoints, prompt and completion content is not persistently retained after the inference request has completed.

Usage Metadata

We may retain request metadata, including token counts, model identifiers, timestamps, latency, error information, and charges, as necessary for billing, reporting, security, fraud prevention, capacity planning, and service reliability.

Account and Billing Records

We retain account, transaction, billing, and financial records for as long as reasonably necessary to provide the Service and afterward as required for tax, accounting, fraud prevention, legal, and regulatory purposes.

Security Records

Security and account activity logs may be retained for a reasonable period as necessary to investigate incidents, prevent abuse, and protect the Service.

When information is no longer reasonably necessary for these purposes, we delete, aggregate, or de-identify it in accordance with our retention practices and applicable law.

6. Cookies and Similar Technologies

Our website and dashboard may use cookies, local storage, and similar technologies that are necessary for:

• Authentication
• Session management
• Security
• Fraud prevention
• User preferences
• Payment functionality

We do not use third-party behavioral advertising trackers to target advertisements based on your activity across unrelated websites or services.

7. Data Security

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures include, where appropriate:

• Encryption of network communications using HTTPS/TLS
• Access controls for production systems
• Authentication and credential-management controls
• Monitoring and logging for security-sensitive events
• Segmentation and protection of production infrastructure
• Use of established payment processors for payment-card information

Payment card data is processed by Stripe rather than stored directly by Direxis.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:

• Request access to personal information we maintain about you
• Request correction of inaccurate information
• Request deletion of certain information
• Request a portable copy of certain information
• Object to or request restriction of certain processing
• Withdraw consent where processing is based on consent
• Appeal certain decisions regarding a privacy request, where applicable

You may exercise applicable rights by contacting us at contact@direxis.ai.

We may need to verify your identity before completing a request.

We will not discriminate against you for exercising privacy rights available under applicable law.

Because Direxis does not sell personal information or share it for cross-context behavioral advertising, we do not provide a sale or targeted-advertising opt-out mechanism.

9. International Data Transfers

Direxis is based in the United States, and our infrastructure and service providers may process information in the United States or other countries.

Where required by applicable law, we use appropriate safeguards for international transfers of personal information.

10. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information directly from children under 18.

If you believe a child has provided personal information to Direxis in violation of this policy, contact us at contact@direxis.ai.

11. Third-Party Services and Links

The Service may contain links to or integrate with third-party websites, models, tools, or services.

This Privacy Policy does not govern the independent practices of third parties. We encourage you to review their applicable privacy policies before providing information to them.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as our Service, technology, or legal obligations change.

When we make changes, we will update the "Last updated" date at the top of this page. If a change materially affects how we handle personal information, we will provide additional notice where required by applicable law.

13. Contact Us

If you have questions about this Privacy Policy, our data practices, or a privacy request, contact us at:

Direxis, Inc. Email: contact@direxis.ai