Privacy Policy

Last updated: February 17, 2026

RouteKey Inc. ("RouteKey", "we", "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

1. Information We Collect

• Account & Contact Data: Name, email address, company name, billing details.
• Usage & Telemetry: IP address (anonymized after 30 days), routing metrics, performance data, feature usage.
• Cookies & Tracking: Essential session cookies; analytics for product improvement. No third-party advertising trackers.
• Communications: Records of support requests and correspondence you initiate with us.

2. How We Use Your Information

We use collected information to provide, maintain, and improve the RouteKey platform; to communicate with you about your account and service updates; to process billing; to comply with legal obligations; and to prevent fraud and abuse.

We do not use your data for advertising profiling or sell it to data brokers.

3. Sharing & Disclosure

We do not sell your personal data. We may share limited data with:

• Service providers: AWS (infrastructure), Cloudflare (DNS), payment processors — all under strict Data Processing Agreements (DPAs).
• Legal requirements: Where required by a valid court order or applicable law, subject to notification where legally permitted.
• Research partners: Anonymized and aggregated network telemetry only — never individual or identifiable data.

4. Your Rights

Depending on your jurisdiction you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. These rights apply under GDPR (EEA/UK), CCPA/CPRA (California), and PDPA (Singapore).

To exercise these rights, contact us at privacy@uat03.routekey.io. We respond within 30 days.

5. Data Retention

Personal data is retained only as long as necessary for the purposes outlined above or as required by law. Routing telemetry is aggregated and pseudonymized after 90 days. Account data is deleted within 60 days of account closure on request.

6. Security

RouteKey is SOC 2 Type II certified. We enforce end-to-end encryption in transit (TLS 1.3+) and at rest (AES-256), apply role-based access controls, and conduct regular third-party penetration tests and audits.

7. International Transfers

Your data may be processed in Singapore, the United States, and the European Union. For transfers from the EEA/UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Changes to This Policy

We may update this policy periodically. Material changes will be notified via email to registered customers at least 14 days before taking effect. The "last updated" date at the top of this page reflects the most recent revision.