Effective Date: March 2026
Contents
Layups AI LLC (“Layups,” “we,” “us,” or “our”) is an AI operations company that designs, deploys, and manages AI-powered workflows and agents for businesses. We are committed to protecting the privacy of our website visitors, clients, and their end users.
This Privacy Policy describes how we collect, use, store, and protect information when you visit our website at layups.ai or when you use our managed AI operations services (the “Services”). By using our website or Services, you agree to the practices described in this policy.
We operate exclusively in the United States. Our Services are not directed at individuals located in the European Union, and we do not knowingly collect data from EU residents in connection with the Services.
We collect information that you voluntarily provide to us, including:
In the course of providing our Services, clients may provide us with access to their business data, systems, and infrastructure (“Client Data”). Client Data is governed by our Master Services Agreement and is processed solely for the purpose of delivering the Services. We do not use Client Data for any purpose other than performing the Services unless the client provides explicit written consent.
When you visit our website, we may automatically collect certain technical information, including:
We use the information we collect for the following purposes:
Our Services involve the deployment of AI-powered agents that operate within our clients’ environments. The following describes how data is handled in connection with our AI Services:
AI agents deployed by Layups may access, process, and generate data within the client’s environment as necessary to perform the tasks defined in the applicable Statement of Work. Agents operate using third-party large language models accessed through API routing services.
We do not use Client Data, client configurations, or agent-generated outputs to train, fine-tune, or improve any machine learning models for use outside of that client’s engagement, unless the client provides explicit written consent.
Any code, content, or data generated by AI agents during the course of performing tasks for a client belongs to the client. Agent-generated outputs are stored in the client’s own repositories and infrastructure.
As part of our managed service, our team may access, inspect, and analyze agent behavior, client configurations, and agent-generated outputs solely for the purposes of monitoring performance, diagnosing issues, optimizing agent behavior, and ensuring service quality. We do not use this access for any purpose unrelated to delivering and improving the Services for that specific client.
We use the following categories of third-party service providers to deliver our Services. Each provider is subject to its own privacy policy and data handling practices:
We use OpenRouter as our primary AI model routing provider to access large language models. OpenRouter does not store prompts or responses unless the user has explicitly opted in to prompt logging. OpenRouter may collect anonymized metadata (such as token counts and latency) for reporting purposes.
Client environments are hosted on dedicated cloud infrastructure. Each client is provisioned in a separate cloud project with isolated access credentials and network connectivity secured via Cloudflare tunnel proxy. This ensures logical and credential-based separation between client environments.
We may use additional third-party providers for website analytics, payment processing, email communications, and customer support. These providers only receive the information necessary to perform their specific functions and are contractually obligated to protect the information they process on our behalf.
We implement commercially reasonable administrative, technical, and organizational security measures to protect the information we collect and process. These measures include:
While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
We retain information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.
Client Data is retained for the duration of the service engagement. Following termination of our Services, we will export and deliver Client Data, client configurations, and agent-generated outputs in a standard format, and permanently delete all such data from our systems within sixty (60) days following the completion of the export process, except where retention is required by applicable law.
Automatically collected website data (such as analytics and server logs) is generally retained for no more than twelve (12) months unless a longer retention period is required for security or legal purposes.
You may request deletion of your personal information by contacting us at the address below. We will respond to deletion requests within the timeframes required by applicable law.
We do not sell your personal information. We may share information in the following limited circumstances:
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:
To exercise these rights, please contact us using the information in Section 13 below. We will verify your identity before processing your request and respond within forty-five (45) days as required by law.
Our website and Services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Effective Date” at the top of this page and, where appropriate, notify you by email or through a notice on our website. We encourage you to review this policy periodically.
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us: