DogRouter Privacy Policy

Effective Date: 26 October 2026

This Privacy Policy explains how LIGHTING TECH PTE. LTD., a Singapore exempt private company limited by shares with UEN 202507600H and registered office at 60 PAYA LEBAR ROAD, #12-03, PAYA LEBAR SQUARE, SINGAPORE 409051 ("DogRouter," "we," "us," or "our"), collects, uses, discloses, and protects personal data when you use dogrouter.ai, the DogRouter API, and related services (collectively, the "Service"). LIGHTING TECH PTE. LTD. is the operator and service provider of the Service and the organisation responsible for personal data collected through the Service. Capitalized terms not defined here have the meaning given in the DogRouter Terms of Service.

This Policy is intended to comply with applicable data protection law (“Applicable Data Protection Law”) and reflects generally recognised data protection principles. If you access the Service from outside Singapore, you acknowledge that your data may be processed in Singapore and other jurisdictions as described in Section 6.

1. Scope

This Policy applies to personal data we collect through the Service. It does not apply to (a) data processed by third-party Model Providers once transmitted to them, which is governed by the relevant Model Provider’s own privacy policy, as described in Section 4; or (b) third-party websites or services linked from the Service.

2. Information We Collect

2.1 Information You Provide

Account information: name, email address, organization name, and password (stored as a salted hash).

Payment information: billing name, billing address, and payment details, which are collected and stored by our third-party payment processor; DogRouter does not store full payment card numbers.

Communications: information you provide when you contact support, respond to surveys, or otherwise correspond with us.

2.2 Information Collected Automatically

Usage data: API request metadata, including timestamps, selected Model, token counts, latency, error codes, and routing decisions.

Device and log data: IP address, browser type, operating system, referring URLs, and similar technical data, collected via server logs and, on the website, cookies and similar technologies (see Section 10).

2.3 Content Data

Your Content: the prompts, files, and other input you submit to the Service.

Output: the content returned by the Model you selected.

We process Your Content and Output as necessary to route your request to the applicable Model Provider, return the result to you, meter usage for billing, and, where applicable, for abuse detection and safety review as described in Section 3.

3. How We Use Information

We use personal data to:

(a) provide, operate, and maintain the Service, including authenticating requests and routing them to the applicable Model Provider;

(b) calculate usage and process billing;

(c) monitor, investigate, and prevent fraud, abuse, and violations of the Acceptable Use Policy in the Terms of Service, including automated and, where necessary, human review of flagged Content for safety purposes (such as suspected child sexual abuse material), in which case we may preserve and disclose the relevant Content to law enforcement or a recognized reporting body;

(d) provide customer support and respond to inquiries;

(e) maintain the security and integrity of the Service;

(f) comply with legal obligations, including tax, accounting, and regulatory requirements; and

(g) with your consent or as permitted by law, send service updates and, where you have opted in, marketing communications.

We do not use Your Content or Output to train our own foundation models. Whether a Model Provider uses Your Content or Output to train its models is governed by that Model Provider’s own terms and privacy policy, as referenced in Section 4; where a Model Provider offers a no-training or zero-data-retention option, we will pass through your selection where the Service supports it.

4. How We Share Information

4.1 Model Providers

By design, the Service transmits Your Content to the Model Provider corresponding to the Model you select, and returns that provider’s Output to you. This transmission is essential to the functioning of the Service. Each Model Provider processes the data it receives in accordance with its own privacy policy and data processing terms, which we encourage you to review. We select Model Providers that contractually commit to confidentiality and data protection obligations appropriate to the service they provide, but we do not control, and are not responsible for, a Model Provider’s independent processing of data once received.

4.2 Service Providers

We share personal data with vendors who perform services on our behalf, including cloud hosting, payment processing, analytics, customer support tooling, and email delivery, under contractual confidentiality and data protection obligations.

4.3 Legal and Safety Disclosures

We may disclose personal data where required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of DogRouter, our Users, or the public, including to report apparent child sexual abuse material to the relevant law enforcement authorities or recognized reporting hotlines.

4.4 Business Transfers

If DogRouter is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to this Policy or a successor policy of materially equivalent protection.

4.5 No Sale of Personal Data

We do not sell personal data to third parties for monetary consideration.

5. Data Retention

We retain account and billing data for as long as your account is active and for a reasonable period thereafter to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. We retain Your Content, Output, associated usage logs, and Google User Data only for as long as reasonably necessary for the purposes described in this Policy, after which they are deleted or anonymized, except where longer retention is required by law or necessary to investigate a suspected violation of the Acceptable Use Policy.

6. International Data Transfers

Because the Service routes requests to Model Providers located in various jurisdictions (including the United States and elsewhere), your data may be transferred across borders as part of the Service’s core functionality. Where we transfer personal data internationally to our service providers, we use contractual and technical safeguards designed to provide a comparable level of protection to that required under Applicable Data Protection Law.

7. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, or destruction, including encryption of data in transit, access controls, and API key authentication. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

8.1 Access and Correction Rights

Under Applicable Data Protection Law, you may have the right to request access to, and correction of, your personal data held by DogRouter. To exercise these rights, contact us using the details in Section 14. We may charge a reasonable fee for processing data access requests as permitted under Applicable Data Protection Law and may decline requests that are manifestly unfounded, excessive, or where an exemption applies.

8.2 Additional Rights

If you are located in a jurisdiction that grants additional data protection rights (such as the right to deletion, restriction of processing, objection to processing, or data portability), we will honor such rights to the extent they apply to you and as required by applicable law, on request to the contact in Section 14.

8.3 Account Deletion

You may delete your account through the dashboard or by contacting us. Following deletion, we will delete or anonymize your personal data in accordance with Section 5, except where retention is required by law.

9. Google User Data

9.1 Information We Receive

If you choose to sign in with Google, we receive the basic profile information that Google makes available with your authorization, namely your name, email address, and profile image (collectively, "Google User Data"). We do not request access to your Google emails, contacts, files, calendars, or other Google account content for this sign-in function.

9.2 How We Use and Share Google User Data

We use Google User Data only to authenticate you, create or link your DogRouter account, display your account profile, maintain account security, and provide support. We do not sell Google User Data, use it for advertising or marketing profiles, or use it to train artificial intelligence or machine-learning models. We do not share Google User Data except with service providers that help us operate authentication and account security under contractual confidentiality and data protection obligations, or where disclosure is required by law.

9.3 Deletion and Revocation

You may request deletion of your Google User Data and DogRouter account through the account dashboard or by emailing support@dogrouter.com. We will delete or anonymize the relevant data in accordance with Section 5, except where retention is required by law. You may also revoke DogRouter's access through your Google Account permissions. Revoking access stops future access to Google User Data but does not, by itself, delete data already associated with your DogRouter account; to delete that data, use the dashboard or contact us at support@dogrouter.com.

10. Cookies and Google Analytics

We use cookies and similar technologies on our website to authenticate sessions, remember preferences, and understand use of the Service. We also use Google Analytics, which may collect first-party cookies or similar pseudonymous identifiers, browser and device information, approximate location derived from IP address, referring pages, pages viewed, and interactions with our website. We use this information to measure aggregate usage, diagnose performance, and improve the website and Service. We do not use Google Analytics data for cross-site behavioral advertising. You can control cookies through your browser or any cookie controls we make available; disabling cookies may affect website functionality. You can also use Google's browser opt-out tools where available.

11. Children's Privacy

The Service is not directed to individuals under 18 years of age, and we do not knowingly collect personal data from anyone under 18. If we become aware that we have collected personal data from a child under 18 without verified parental consent, we will take steps to delete that information.

12. Data Breach Notification

In the event of a data breach affecting your personal data that creates a real risk of harm, we will notify affected Users and, where required, the Personal Data Protection Commission of Singapore or other relevant authority, without undue delay and in accordance with applicable law.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified by posting the updated Policy on the Service and updating the “Last Updated” date, or by direct notice for material adverse changes. Your continued use of the Service after the effective date of an update constitutes acceptance of the updated Policy.

14. Contact Us

For questions about this Policy, requests concerning Google User Data, or to exercise your data protection rights, contact: LIGHTING TECH PTE. LTD. (DogRouter) UEN: 202507600H Registered Office: 60 PAYA LEBAR ROAD, #12-03, PAYA LEBAR SQUARE, SINGAPORE 409051 Data Protection Contact: support@dogrouter.com

15. Governing Law

This Policy is governed by the laws of Singapore. Disputes arising out of or relating to this Policy are subject to the dispute resolution provisions of the DogRouter Terms of Service.