Privacy PolicyEffective: March 2026Statio is built for security. This policy explains what data we collect, how we handle it, and what we will never do with it.
What We CollectEmail address — provided when you sign up or join the waitlist.API credentials you vault — stored encrypted so your agents can authenticate with third-party APIs.API call logs — request metadata (caller, target API, timestamp, status) captured for audit trail purposes.Usage data — aggregate metrics such as API call counts, server counts, and feature usage to operate and improve the service.
How We Use ItProvide the service — route API calls, manage credentials, enforce rate limits.Enforce access policies — apply the permissions you configure for your agents and team members.Generate audit trails — produce the compliance logs and usage reports available in your dashboard.Communicate with you — send service updates, security notices, and billing information.
Credential HandlingAll vaulted credentials are encrypted at rest using AES-256 encryption.Access tokens issued to agents expire after 24 hours and must be refreshed.Credentials are never logged in plaintext — audit logs capture metadata only (which credential was used, not its value).Credentials are transmitted over TLS and are only decrypted at the moment of proxied API call execution.
What We Don't DoWe do not access your vaulted credentials for any purpose other than proxying your authorized API calls.We do not share, sell, or provide your data to third parties for advertising or marketing purposes.We do not use your API call content for model training or any purpose beyond providing the service.We do not retain credentials after account deletion.
Data RetentionAudit logs are retained according to your plan tier — Free (7 days), Developer (30 days), Team (90 days), Enterprise (custom).Vaulted credentials are deleted immediately upon account deletion or when you remove them.Usage metrics are retained in aggregate form for service improvement and are not tied to individual API call content.You can request a full data export or deletion at any time by contacting us.