Overview
Valite (“we”, “us”) provides a gateway and control plane that observes production AI traffic and finds lower-cost ways to run it. This policy explains what data we process to do that, how we use it, and the choices you have. If your organization has a separate written agreement with us, that agreement governs where it differs from this policy.
Data we process
Gateway traffic. Valite is a gateway for your LLM traffic, and logging that traffic is the product: request and response bodies, token counts, latency, cost, and model metadata are stored so we can profile your workloads and prove cheaper execution policies against your own baseline.
Account data. When you create an account we store your name, email address, organization details, and authentication records.
Service diagnostics. We keep operational logs needed to run the service securely — authentication events, errors, and basic request metadata for the dashboard and API.
Credentials
Credential headers — API keys, cookies, and authorization tokens — are redacted from every log record before it is written. Your model-provider API keys pass through the gateway to the provider and are never stored. Valite API keys are stored hashed; only a short display prefix is kept in plaintext.
How we use data
Logged traffic is used solely to provide the service to you: profiling, replay, evaluation, and routing recommendations for your own workflows. We do not sell your data, we do not share it with other customers, and we do not use it to train models.
Replay and evaluation jobs re-send captured requests to model providers to evaluate candidate policies, within budgets agreed in advance. Providers receive that traffic under their own terms, as they do when your application calls them directly.
Where data lives and how it is protected
Data is stored on managed cloud infrastructure, encrypted in transit and at rest. Every record is scoped to your organization, and access is checked against organization membership on every request. Our security practices are described in more detail on the security page.
Retention and deletion
We retain captured traffic and account data while your account is active and as needed to provide the service. You can request deletion of your captured traffic or your entire account at any time, and we will delete it — including replay artifacts derived from it. Enterprise agreements can specify custom retention windows.
Sharing
We share data only with the infrastructure providers that host the service (cloud, database, and authentication infrastructure), with model providers as directed by your configuration, and where required by law. We do not sell personal data.
Your rights
You can request access to, correction of, export of, or deletion of your data at any time by emailing us. Depending on where you are located you may have additional rights under laws such as the GDPR or CCPA, and we will honor requests to exercise them.
Changes and contact
We will update this policy as the service evolves and note the date of the latest revision above. Questions and requests: hello@valite.ai.
See also: Security · Terms of Service