Privacy Notice

1. Scope and roles

AI Gateway HQ LLC is the controller for the public-site, account, security, support, and billing-administration processing described in this notice. This Privacy Notice applies to personal information processed through AI Gateway HQ public websites, account and support workflows, control plane, gateway services, and commercial interactions. The secure privacy-request form linked on this page is the controller contact for data-protection questions and requests. It does not govern a model provider, identity provider, payment processor, or other third party operating under its own terms.

For public-site, account, security, and billing administration data, AI Gateway HQ generally determines why and how information is used. For Customer Content sent through the gateway on an organization's instructions, AI Gateway HQ generally acts as that organization's service provider or processor. An executed data processing addendum controls if it conflicts with this notice.

2. Information we collect

• Account and organization data: name, work email, organization, role, authentication identifiers, membership, permissions, and administrative contacts.
• Configuration and security data: virtual-key metadata, provider and route configuration, budget and policy settings, IP address, user agent, sign-in and administrative events, and support-access approvals.
• Gateway evidence: request identifiers, model and provider choice, decision reason, status, timing, token and cost measurements, cache and fallback outcome, and policy or guardrail result.
• Customer Content: prompts, files, tool instructions, outputs, and related request content when needed to relay or evaluate the request under Customer's configuration.
• Commercial data: plan, service credit ledger, invoices, payment status, Stripe customer and transaction identifiers, billing contact, tax status, and dispute or refund events. AI Gateway HQ does not store full card numbers or card security codes.
• Support and public inquiries: messages, attachments, troubleshooting evidence, ticket history, and the contact information submitted with them.
• Consent-based website analytics: page, referrer, campaign, approximate location, device/browser data, and interaction measurements only after the visitor permits analytics where the consent control is presented.

3. Prompt, output, and credential handling

The gateway is designed not to persist prompt and output bodies in ordinary request evidence by default. Request content is processed in memory as needed to evaluate policy, route the request, relay it to the selected provider, and return a response. A Customer-enabled cache, support investigation, guardrail integration, webhook, or future feature can change that data path; the applicable interface, documentation, or Order must identify the change.

Provider credentials submitted through supported write-only workflows are encrypted at rest and decrypted only for authorized request execution. Interfaces return credential status and metadata rather than the secret value. We do not use Customer provider credentials to train models or for unrelated traffic.

A selected model provider receives the content Customer sends to it. Customer must review that provider's data-use, retention, region, and model-training settings. BYOK traffic uses the provider relationship chosen by Customer; managed-provider traffic, when expressly enabled, follows the provider and deployment terms stated for that service.

4. Purposes and legal bases

Where the GDPR applies and AI Gateway HQ acts as controller, the legal basis depends on the specific processing. We use consent for optional public-site analytics. We use performance of a contract, or steps requested before a contract, for account creation, authentication, delivery of the Services, support requested by a user, and customer billing. We use legitimate interests to secure the Services, prevent fraud and abuse, preserve proportionate audit evidence, diagnose failures, operate reliable capacity, and respond to business inquiries, except where an individual's rights and interests override those interests. We use compliance with legal obligations for required tax, accounting, sanctions, regulatory, and lawful-process records. We may use establishment, exercise, or defense of legal claims where applicable law permits it.

When AI Gateway HQ processes Customer Content as a processor, the Customer organization determines the purpose and legal basis and is responsible for its notices and instructions. AI Gateway HQ processes that content to provide the Customer-configured gateway function and does not select a separate advertising or model-training purpose for it.

• Authenticate users and service clients; enforce membership, role, policy, rate, concurrency, and budget boundaries.
• Route and deliver model requests, calculate usage, reserve and reconcile service credit, and operate customer-selected features.
• Secure the Services, investigate misuse or incidents, diagnose failures, prevent fraud, and preserve audit evidence.
• Provide onboarding, support, service notices, and requested commercial or security information.
• Process payments, subscriptions, refunds, disputes, taxes, and accounting records when billing is enabled.
• Measure and improve public content and campaigns using consented analytics. Public-site analytics are not used to collect prompt content or provider credentials.
• Comply with law, enforce agreements, and establish or defend legal claims.

5. Required and optional information

Optional public-site analytics is not required to use the public website, documentation, sign-up path, or contact workflow. The analytics choice can be declined or withdrawn without reducing those services.

The fields marked required in an account, support, commercial, or payment workflow are needed to perform the requested action, verify authority, secure the account, or enter or perform the applicable agreement. If required information is not provided, we may be unable to create the account, process the request, deliver the selected service, or complete the transaction. Do not provide prompt content, credentials, payment-card data, or regulated data in a public contact form.

6. Disclosure and subprocessors

We disclose information only as needed to operate the Services, follow Customer instructions, process a transaction, protect rights and safety, complete a corporate transaction with appropriate safeguards, or comply with valid legal process. We do not sell personal information for money and do not use Customer Content for cross-context behavioral advertising.

The Subprocessor List identifies infrastructure, payment, and analytics providers used by AI Gateway HQ and explains customer-directed model providers separately. Personnel and contractors receive access only for a defined business need and are subject to confidentiality and access controls.

7. Analytics and privacy choices

The public website's analytics control defaults nonessential measurement off until a visitor makes a choice. A visitor can reopen Privacy choices in the site footer to change that decision. Essential storage used for security, load delivery, consent state, or sign-in is not advertising storage.

AI Gateway HQ uses aggregated service measurements to operate capacity and reliability. These operational measurements are separate from optional public-site analytics and are not intended to reconstruct prompt bodies.

8. Retention and deletion

Retention depends on the record and service configuration. Ephemeral request content is not intentionally retained after request processing unless a Customer-enabled feature or support action requires it. Security, administrative, usage, billing, and audit records are retained for the period reasonably needed to operate the Services, meet contractual or legal duties, prevent fraud, resolve disputes, and maintain financial records. An enterprise Order may define specific retention and deletion requirements.

When an account closes, we delete or de-identify personal information that is no longer required, subject to backup cycles, security evidence, payment and tax records, legal holds, and records necessary to establish that a request was handled. Customers should export records they are required to retain before closing the service.

9. Security

AI Gateway HQ uses administrative, technical, and organizational safeguards designed for the sensitivity of the data, including scoped identity, encrypted transport, encrypted secrets, tenant boundaries, audit events, deployment review, and security monitoring. Security design and current certification status are described in the Trust Center; design-for-a-framework is not a certification.

No online service is risk free. Please report a suspected vulnerability or account compromise through the Contact and Security Disclosure page without including active credentials, sensitive production content, or exploit payloads beyond what is needed to reproduce safely.

10. International processing

The current hosted production service is designed around an AWS region in the United States. Customer-selected model providers and website, identity, support, or payment services may process data in other locations according to their own infrastructure. Enterprise deployment and transfer terms must be confirmed in an Order; the public site does not promise data residency that has not been contracted and validated.

Where applicable law requires a transfer safeguard, the relevant service terms, data processing addendum, or Order must identify the approved mechanism, such as an adequacy decision or applicable standard contractual clauses, and any required supplementary measures. Contact us through the privacy-request workflow to request information about the safeguard applicable to a particular transfer. AI Gateway HQ does not represent that a transfer mechanism is active until the applicable terms and assessment are complete.

11. Individual rights

Depending on applicable law, a person may have rights to access, correct, delete, restrict, or receive certain personal information, withdraw consent, or object to particular processing. Submit a request through the secure contact channel on this page using the relevant work email. We may verify identity and organizational authority before acting. If information is controlled by a Customer organization, we may direct the request to that organization.

Withdrawing consent does not affect processing that was lawful before withdrawal. A person in the EU or EEA may lodge a complaint with the data-protection supervisory authority where the person lives or works, or where the person believes an infringement occurred. You may also have a right to appeal our response. We will not discriminate against a person for exercising an applicable privacy right.

12. Automated decisions

The Services automate routing, budget, security, and policy decisions configured by a Customer. AI Gateway HQ does not use public-site analytics, account administration data, or the self-service gateway to make a solely automated decision about an individual that produces a legal or similarly significant effect. If a future feature changes that boundary, it requires a separate documented purpose, legal review, notice, and applicable human-review control before release.

13. Children and changes

The Services are for organizations and are not directed to children under 13 or the minimum age required by local law. We do not knowingly collect a child's personal information through a self-service account.

We may update this notice as the Services and legal requirements change. The effective date identifies the current version. Material changes will be communicated through a reasonable account or website notice when appropriate.