Privacy Policy

Last updated: March 1, 2026

1. Information We Collect

Altirs is a product of Eleven Orbit, the data controller for the information described in this policy.

When you create an account, we collect your email address and name via OAuth providers (GitHub, Google) or magic link authentication. When you use our API, we log only the first 100 characters of your input for debugging purposes. Full inputs are never stored.

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Authenticate your identity and API requests
  • Send transactional emails (usage alerts, billing notifications)
  • Monitor usage for rate limiting and billing
  • Improve the Service based on aggregate, anonymized usage patterns

3. Data Storage and Security

Your data is stored in Supabase-managed PostgreSQL databases. API keys are hashed using bcrypt before storage, so we never store plaintext API keys. All communication with our API is encrypted via TLS. We implement Row Level Security (RLS) policies to ensure data isolation between users.

4. Data We Do NOT Store

We do not store the full text of your API inputs or outputs. Only a truncated preview (first 100 characters) is retained in check logs. We do not sell, share, or provide your data to third parties for advertising purposes.

5. Third-Party Services

We use the following third-party services:

  • Supabase: Authentication and database hosting
  • Stripe: Payment processing (we never store your card details)
  • Upstash: Rate limiting via Redis
  • Vercel: Application hosting

6. Cookies

We use cookies solely for authentication session management. We do not use tracking cookies, analytics pixels, or third-party advertising cookies.

7. Data Retention

Check logs are retained for 90 days and then automatically deleted. Account data is retained for as long as your account is active. Upon account deletion, all associated data (workspaces, API keys, logs) is permanently removed within 30 days.

8. Your Rights

You have the right to: access your personal data, request correction of inaccurate data, request deletion of your data, and export your data. Contact us to exercise any of these rights.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions, contact us at privacy@altirs.ai.