Privacy Policy

1. Who is responsible

Pegasus Tech AI Provider, based in Brazil, is responsible for the personal data described here. For any privacy request, email support@pegasusrelay.com.

2. What we collect

• Account: your name and email address.
• Subscription: your plan, subscription status and billing country, as received from Creem. We never see or store your card details.
• Usage metering: for each request, the date and time, the model used, the number of tokens, the duration and whether there was an error.
• Technical logs: information such as IP address and request identifiers, kept for a limited time for security, rate limiting and abuse prevention.

3. What we don't collect

We do not store the content of your work. Prompts, responses, files and attachments are not saved in logs, databases or admin screens. After a request is done, all that remains on our side are the usage numbers above.

This website uses no advertising cookies and no tracking pixels. The video on the homepage is embedded from YouTube (youtube-nocookie.com) and only loads when you press play.

4. Why we use it

• To provide the service: create your account, issue your key, authorize requests and apply rate limits.
• Legal obligations: keep billing and access records for the periods required by law.
• Legitimate interest: keep the platform secure, prevent fraud and abuse, and improve the service using aggregated numbers.

5. Who we share it with

We do not sell personal data. We share it only as needed to run the service:

• Model providers: the content of your request is sent to the provider that generates the response. It passes through us but is not stored by us. Each provider has its own data policy.
• Creem: our Merchant of Record, which processes payments, taxes and refunds under its own privacy policy.
• Infrastructure: hosting, database and email services that keep the platform running.
• Authorities: when required by a valid legal order.

6. Where data is processed

Our servers are in the United States and Brazil. Model providers may process requests in other countries. When data leaves your country, we rely on the safeguards available under applicable law.

7. How long we keep it

Account and subscription data are kept while your account is active, and afterwards only as long as required by law or to prevent fraud. Technical logs are kept for a limited period and then deleted.

8. Your rights

Depending on where you live (for example under the GDPR or Brazil's LGPD), you can ask to access, correct, export or delete your data, and to object to or restrict its use. Email support@pegasusrelay.com from the address on your account and we will answer within 15 days. You can also complain to your local data protection authority.

9. Changes

We may update this policy. The date at the top shows the latest revision, and significant changes are announced by email.