Privacy Policy

Note: Plexor is currently a research project at Bona Opera Studios, not a commercial entity. All features are free during the research phase.

Bona Opera Studios ("Plexor," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our intelligent LLM routing research service and related websites (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an Account: Name, email address, password (encrypted), and organization name
• Subscribe to Services: Billing information, payment method details (processed by our payment processor)
• Contact Us: Any information you provide in communications with our support team
• Use Our API: API requests and responses transmitted through our Service

1.2 Information Collected Automatically

When you access the Service, we automatically collect:

• Usage Data: API call volumes, request timestamps, response times, provider routing decisions, and cost metrics
• Device Information: IP address, browser type, operating system, and device identifiers
• Log Data: Server logs including access times, pages viewed, and referring URLs
• Cookies and Similar Technologies: Session cookies for authentication and analytics cookies for service improvement

1.3 Information We Do NOT Collect

We do not store, log, or retain the content of your API prompts or responses. Your intellectual property remains yours. Prompts and responses are processed in real-time and are not persisted to any storage system. We maintain only aggregate, anonymized usage statistics for billing and service optimization purposes.

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To operate, maintain, and improve the Service
• Account Management: To create and manage your account, process transactions, and send service-related communications
• Billing and Payments: To calculate usage-based charges and process payments
• Analytics and Improvement: To understand usage patterns and improve our routing algorithms and service quality
• Security: To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activities
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Communication: To send you updates about service changes, security alerts, and support messages

3. How We Share Your Information

We may share your information in the following circumstances:

3.1 Third-Party Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

• LLM Providers: OpenAI, Anthropic, Google, Mistral, and DeepSeek receive your API requests to generate responses. Each provider has its own privacy policy governing their handling of data.
• Payment Processors: Stripe processes payment information on our behalf
• Cloud Infrastructure: Microsoft Azure hosts our services
• Analytics Providers: For aggregated, anonymized usage analytics

3.2 Legal Requirements

We may disclose your information if required by law, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

If Plexor is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

3.4 With Your Consent

We may share information for other purposes with your explicit consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

• Account Data: Retained until account deletion, plus 30 days for backup recovery
• Usage Metrics: Aggregated, anonymized data retained indefinitely for analytics
• Billing Records: Retained for 7 years as required by tax regulations
• API Content: Not retained; processed in real-time only

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Employee security training and confidentiality agreements
• Incident response procedures

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

6.1 Access and Portability

You may request access to your personal information and receive a copy in a structured, commonly used format.

6.2 Correction

You may request correction of inaccurate or incomplete personal information.

6.3 Deletion

You may request deletion of your personal information, subject to certain exceptions (such as compliance with legal obligations).

6.4 Opt-Out

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

6.5 Cookie Preferences

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

7. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside, including the United States. These countries may have data protection laws that differ from your country. We implement appropriate safeguards to protect your information in accordance with this Privacy Policy.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

9. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed and to whom
• Right to opt out of the sale of personal information (Note: We do not sell personal information)
• Right to request deletion of personal information
• Right to non-discrimination for exercising CCPA rights

To exercise these rights, please contact us using the information provided below.

10. Washington State Privacy Rights

As a Washington State company, we comply with the Washington My Health My Data Act and other applicable Washington privacy laws. We do not collect health data through the Service.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us