Privacy Policy
Last Updated: 19 July 2025
Your privacy is important to us. This Privacy Policy explains how MapleAI ("we", "us", or "our") collects, uses, and discloses information about you when you use our API service (the "Service"). We are committed to being transparent about our practices and respecting your privacy.
1. Information We Collect
We collect information in a few different ways to provide and improve our Service.
A. Information You Provide to Us
Account Information: When you sign up, we collect your username and a securely hashed version of your password.
Payment Information: When you subscribe to a paid plan, our payment processor, Stripe, collects and processes your payment information. We do not store your full credit card number, but we do store the associated Stripe Customer ID to manage your subscription.
Communications: If you contact us directly for support or other inquiries, we may keep a record of your communication.
B. Information We Collect Automatically
Usage Data: Our network is protected by Cloudflare, which processes traffic data, including your IP address, to provide security and DDoS mitigation. We also automatically log metadata about your API usage, such as the number of requests you make, timestamps, and error rates to maintain and secure our Service.
Cookies: We use essential cookies on our website to manage user sessions (e.g., keeping you logged in to your dashboard).
2. How We Process API Request Data
This is the most important section for understanding how your AI prompts are handled.
To provide you with AI responses, we act as an intermediary, sending your API requests to third-party AI model providers. When you make an API call, the content of your request (such as prompts, text, and conversation history) is passed directly to one of our providers: OpenRouter, Google and OpenAI (via their AI Platform / Vertex AI services).
These providers process your request content to generate the AI response, which we then pass back to you. For the purpose of providing the service, this request and response data is processed in-memory by MapleAI and is not persistently stored on our servers. However, our third-party providers have their own data retention and privacy policies, which we do not control. We strongly encourage you to review their policies:
OpenRouter Privacy Policy: https://openrouter.ai/privacy
Google Privacy Policy: https://policies.google.com/privacy
OpenAI Privacy Policy: https://openai.com/policies/row-privacy-policy
3. How We Use Your Information
We use the information we collect to:
Provide, operate, and maintain our Service.
Route your API requests to the appropriate AI provider.
Process your transactions and manage your subscriptions.
Prevent abuse, enforce our terms, and secure our platform.
Communicate with you, including sending service-related notices and responding to your inquiries.
4. Data Sharing and Disclosure
We do not share your personal information with third parties except in the circumstances described below:
AI Service Providers: As detailed in Section 2, we share the content of your API requests with OpenRouter, Google and OpenAI to fulfill the core function of the Service.
Network Security Provider: We use Cloudflare to protect our Service from malicious attacks. Cloudflare processes network traffic data as part of this service. You can view their privacy policy here.
Payment Processor: We share necessary information with Stripe to process your payments.
Legal Compliance: We may disclose information if required to do so by law, in response to a subpoena, or if we believe in good faith that such action is necessary to protect our rights, your safety, or the safety of others.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5. International Data Transfers
Our primary servers are located in Germany and are therefore subject to the strict data protection standards of the General Data Protection Regulation (GDPR). However, to provide our Service, we utilize providers such as Google, OpenRouter, and Cloudflare, whose servers may be located in the United States. Therefore, when you use our Service, your information is processed in Germany and may also be transferred to the United States. We rely on established legal mechanisms, such as Adequacy Decisions and Standard Contractual Clauses (SCCs), to ensure your data is protected when transferred outside of Europe.
6. Your Rights and Choices
Under GDPR and other data protection laws, you have certain rights regarding your personal information. These include:
The right to access: You can request a copy of the personal data we hold about you.
The right to rectification: You can request that we correct any inaccurate information.
The right to erasure: You can request that we delete your account and associated personal data, subject to our legal obligations.
The right to object to processing: You can object to our processing of your personal data in certain circumstances.
You can exercise these rights by managing your account from the dashboard or by contacting us directly at the email below.
7. Data Security
We take security seriously and use industry-standard practices, including encryption and hashing, to protect the data we store. However, no method of transmission over the Internet or method of electronic storage is 100% secure. You are also responsible for keeping your API key and password confidential.
8. Children's Privacy
Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time-to-time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at: [email protected].