1. Introduction & Overview
Flixil, Inc. ("Flixil", "we", "our", or "us") operates the Flixil AI infrastructure and observability platform. We are deeply committed to protecting your privacy and ensuring zero unnecessary data retention.
This Privacy Policy describes what information we collect when you use our website, developer APIs, client SDKs, and Lunar Personal workspace.
2. Zero Prompt & Output Retention Guarantee
Flixil provides an AI gateway proxy service. When you route API requests to upstream model providers (such as OpenAI, Anthropic Claude, Google Gemini, or Groq) through Flixil:
- We do NOT store or log user prompt contents, input messages, system instructions, or LLM text/audio/video output responses.
- Ephemeral Memory Processing: Request and response payloads pass strictly through volatile RAM buffers for the duration of the HTTP connection and are destroyed immediately upon response delivery.
- Telemetry Metadata Only: We log non-sensitive metadata only (token counts, request latency in milliseconds, model identifier, timestamp, and HTTP status code) to generate your usage dashboards.
3. Information We Collect
We collect the following minimal categories of information:
- Account Credentials: Email address, hashed password, and workspace identifiers required to authenticate your developer account.
- Encrypted Provider Secrets: API keys provided for third-party models are encrypted at rest using AES-256-GCM and stored with Row-Level Security isolation.
- Telemetry Metrics: Numerical token usage, latency metrics, and error rates used to provide analytics charts and calculate spend.
4. GDPR & CCPA Compliance Rights
Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you have the right to access, export, rectify, or erase your account data at any time. You can trigger automated data export and account deletion directly from your workspace Settings tab.
5. Security of Your Information and Credentials
We implement reasonable technical and organisational measures designed to protect personal information, API keys, and other credentials handled by Flixil against unauthorized access, disclosure, alteration, or destruction. However, no internet-based service can guarantee absolute security. Users are responsible for maintaining the confidentiality of their credentials and should promptly revoke or rotate any API key they believe may have been compromised. Flixil will respond to security incidents and provide any notifications required by applicable law.
6. Contact Our Data Protection Officer
For privacy inquiries or compliance questions, please contact our privacy engineering team at flixilsupport@gmail.com.