1. Introduction
   Layups AI LLC (“Layups,” “we,” “us,” or “our”) is an AI operations company that designs, deploys, and manages AI-powered workflows and agents for businesses. We are committed to protecting the privacy of our website visitors, clients, and their end users.

This Privacy Policy describes how we collect, use, store, and protect information when you visit our website at layups.ai or when you use our managed AI operations services (the “Services”). By using our website or Services, you agree to the practices described in this policy.

We operate exclusively in the United States. Our Services are not directed at individuals located in the European Union, and we do not knowingly collect data from EU residents in connection with the Services.

1. Information We Collect
   Information You Provide Directly
   We collect information that you voluntarily provide to us, including:

Name, email address, company name, and phone number when you contact us, request a demo, or sign up for our Services
Billing and payment information necessary to process transactions
Communications you send to us, including support requests and feedback
Information provided in connection with a Master Services Agreement or Statement of Work
Client Data
In the course of providing our Services, clients may provide us with access to their business data, systems, and infrastructure (“Client Data”). Client Data is governed by our Master Services Agreement and is processed solely for the purpose of delivering the Services. We do not use Client Data for any purpose other than performing the Services unless the client provides explicit written consent.

Information Collected Automatically
When you visit our website, we may automatically collect certain technical information, including:

IP address, browser type, operating system, and device information
Pages visited, referring URLs, and time spent on pages
General geographic location (city/region level, derived from IP address)
3. How We Use Your Information
We use the information we collect for the following purposes:

To provide and operate our Services — including deploying, monitoring, tuning, and managing AI agents and workflows on behalf of our clients
To communicate with you — responding to inquiries, providing support, and sending service-related notices
To process transactions — billing, invoicing, and payment processing
To improve our Services — analyzing usage patterns and performance to enhance our offerings
To ensure security — detecting, preventing, and addressing technical issues, fraud, and security threats
To comply with legal obligations — as required by applicable law, regulation, or legal process
4. AI Services and Data Processing
Our Services involve the deployment of AI-powered agents that operate within our clients’ environments. The following describes how data is handled in connection with our AI Services:

Agent Operations
AI agents deployed by Layups may access, process, and generate data within the client’s environment as necessary to perform the tasks defined in the applicable Statement of Work. Agents operate using third-party large language models accessed through API routing services.

No Training on Client Data
We do not use Client Data, client configurations, or agent-generated outputs to train, fine-tune, or improve any machine learning models for use outside of that client’s engagement, unless the client provides explicit written consent.

Agent-Generated Output
Any code, content, or data generated by AI agents during the course of performing tasks for a client belongs to the client. Agent-generated outputs are stored in the client’s own repositories and infrastructure.

Observation and Tuning
As part of our managed service, our team may access, inspect, and analyze agent behavior, client configurations, and agent-generated outputs solely for the purposes of monitoring performance, diagnosing issues, optimizing agent behavior, and ensuring service quality. We do not use this access for any purpose unrelated to delivering and improving the Services for that specific client.

1. Third-Party Service Providers
   We use the following categories of third-party service providers to deliver our Services. Each provider is subject to its own privacy policy and data handling practices:

AI Model Providers
We use OpenRouter as our primary AI model routing provider to access large language models. OpenRouter does not store prompts or responses unless the user has explicitly opted in to prompt logging. OpenRouter may collect anonymized metadata (such as token counts and latency) for reporting purposes.

Cloud Infrastructure
Client environments are hosted on dedicated cloud infrastructure. Each client is provisioned in a separate cloud project with isolated access credentials and network connectivity secured via Cloudflare tunnel proxy. This ensures logical and credential-based separation between client environments.

Other Service Providers
We may use additional third-party providers for website analytics, payment processing, email communications, and customer support. These providers only receive the information necessary to perform their specific functions and are contractually obligated to protect the information they process on our behalf.

1. Data Security and Infrastructure
   We implement commercially reasonable administrative, technical, and organizational security measures to protect the information we collect and process. These measures include:

Environment isolation — each client is hosted in a separate cloud project with dedicated access credentials, ensuring no client’s data is accessible from another client’s environment
Encrypted connectivity — client environments are connected via Cloudflare tunnel proxy, providing encrypted ingress without exposing origin servers to the public internet
Access controls — access to client environments is restricted to authorized personnel on a need-to-know basis
Credential isolation — each client environment uses separate API keys and access tokens that are not shared across environments
While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

1. Data Retention and Deletion
   We retain information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Client Data
Client Data is retained for the duration of the service engagement. Following termination of our Services, we will export and deliver Client Data, client configurations, and agent-generated outputs in a standard format, and permanently delete all such data from our systems within sixty (60) days following the completion of the export process, except where retention is required by applicable law.

Website Visitor Data
Automatically collected website data (such as analytics and server logs) is generally retained for no more than twelve (12) months unless a longer retention period is required for security or legal purposes.

Deletion Requests
You may request deletion of your personal information by contacting us at the address below. We will respond to deletion requests within the timeframes required by applicable law.

1. Data Sharing and Disclosure
   We do not sell your personal information. We may share information in the following limited circumstances:

Service providers — with third-party vendors who assist us in operating our website and delivering our Services, subject to confidentiality obligations
AI model providers — prompts and data may be transmitted to third-party AI model providers in the course of agent operations, subject to those providers’ data handling practices as described in Section 5
Legal compliance — when required by law, regulation, legal process, or governmental request
Protection of rights — to protect the rights, property, or safety of Layups, our clients, or others
Business transfers — in connection with a merger, acquisition, or sale of all or a portion of our assets, in which case your information may be transferred as part of the transaction
9. Your Rights Under California Law (CCPA)
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:

Right to know — you may request that we disclose the categories and specific pieces of personal information we have collected about you
Right to delete — you may request that we delete personal information we have collected from you, subject to certain exceptions
Right to opt out of sale — we do not sell personal information, so this right does not apply
Right to non-discrimination — we will not discriminate against you for exercising your privacy rights
To exercise these rights, please contact us using the information in Section 13 below. We will verify your identity before processing your request and respond within forty-five (45) days as required by law.

1. Cookies and Tracking Technologies
   Our website may use cookies and similar tracking technologies to collect information about your browsing activity. These may include:

Essential cookies — necessary for basic website functionality
Analytics cookies — help us understand how visitors interact with our website
You can control cookie preferences through your browser settings. Disabling certain cookies may affect your experience on our website.

We do not respond to “Do Not Track” signals at this time, as there is no industry-standard protocol for such signals.

1. Children’s Privacy
   Our website and Services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information promptly.
2. Changes to This Policy
   We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Effective Date” at the top of this page and, where appropriate, notify you by email or through a notice on our website. We encourage you to review this policy periodically.
3. Contact Us
   If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us:

Layups AI LLC

Email: privacy@layups.ai

Website: www.layups.ai