1. Introduction
GateConsole (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, products, and services.
2. Information We Collect
We collect the following categories of information:
Account Information
Name, email address, company name and work-related details when you sign up.
Usage Information
Information about how you use GateConsole, including API requests, token usage, features accessed and application settings.
Device & Log Information
IP address, browser type, device information and log data to maintain security and improve performance.
3. How We Use Information
We use the information we collect to:
- Provide, operate and improve GateConsole
- Monitor usage, performance and security
- Communicate with you about your account and product updates
- Personalize your experience
- Comply with legal obligations
- Detect and prevent fraud and abuse
Your AI traffic stays yours
When your applications send requests through GateConsole, we process that traffic on your behalf and on your instructions. We use it only to route requests to the model providers you chose, apply the guardrails and policies you configured, and give you logs, usage and cost reporting.
- We do not use your prompts, responses or other customer data to train AI models, ours or anyone else’s.
- We do not sell your data or use it for advertising.
- By default we record request metadata (such as model, provider, token counts, latency, cost and policy outcome). Storing prompt and response content is optional and controlled by your workspace admins.
For this customer traffic, your organization decides why and how it is processed and GateConsole acts as its service provider (data processor). For account, website and billing information, GateConsole is the controller. A data processing agreement is available on request.
4. Data Sharing
We do not sell personal information. We share it only in these limited cases:
Model providers you connect
When you route requests through the AI Gateway, we forward them to the providers you have configured (for example OpenAI, Anthropic or Google). Those providers handle the request under their own terms and privacy policies.
Service providers
Hosting, infrastructure, email delivery, analytics, customer support and payment partners that help us run GateConsole. They may only use data to provide services to us and are bound by confidentiality and data protection obligations.
Your organization
Workspace admins can see activity from their own team, such as usage, cost, routing decisions, alerts and audit logs, according to the roles set in Teams & RBAC.
Legal and safety
We may disclose information where required by law or valid legal process, or where needed to enforce our terms, protect our users and prevent fraud or abuse.
Business transfers
If GateConsole is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. We will tell you before it becomes subject to a different privacy policy.
5. Data Security
Security is built into how GateConsole works, since securing AI usage is what the product is for. We use technical and organizational measures that include:
Encryption
Data is encrypted in transit between your applications, GateConsole and your model providers, and encrypted at rest in our storage.
Credential protection
Provider API keys and other secrets are stored encrypted and are never displayed in full or written to logs.
Access control
Role-based access control limits who in your workspace can see or change applications, policies and logs. Internal access is restricted to staff who need it and is reviewed.
Guardrails
Policies you enable, such as PII detection and redaction, secrets detection and prompt-injection checks, run on traffic before it reaches your providers or your stored logs.
Audit trail
Administrative and policy changes are recorded in audit logs so your team can review who changed what, and when.
Monitoring and response
We monitor our systems for abuse and unauthorized access, and keep an incident response process. If a breach affects your data we will notify you without undue delay.
No system is completely secure, and we cannot guarantee absolute security. Please protect your own credentials, use role-based access and keep your workspace’s guardrail policies up to date.
6. Your Rights
Depending on where you live (for example under the GDPR, the UK GDPR, the CCPA/CPRA or India’s Digital Personal Data Protection Act), you may have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate or incomplete
- Delete your personal information, subject to legal exceptions
- Receive a copy of your information in a portable format
- Object to or restrict certain processing, including marketing
- Withdraw consent where we rely on it
Workspace admins can export and delete workspace data from the dashboard. To exercise a right over account information, email privacy@gateconsole.com. We may need to verify your identity and will respond within the time required by applicable law. If you use GateConsole through your employer, your organization controls the traffic that passes through its workspace, so please contact it first for requests about that data. You can also complain to your local data protection authority.
7. Data Retention
We keep information only as long as we need it for the purposes in this policy.
- Account information
- Kept while your account is active and for a limited period afterwards for legal, tax and dispute-resolution purposes.
- Usage metadata and request logs
- Kept for the retention period configured by your workspace admins. When it expires the records are deleted or irreversibly aggregated.
- Prompt and response content
- Not stored unless your admins turn on content logging. If enabled, it follows the same configured retention period and can be redacted by your guardrail policies.
- Audit logs
- Kept for the period set for your workspace so you can meet your own security and compliance needs.
- After account closure
- We delete or anonymize your workspace data promptly, except where we must keep it by law or to resolve a dispute. Backups are overwritten on their normal cycle.
8. Cookies
We use cookies and similar technologies on our website and dashboard for these purposes:
Essential
Needed to sign you in, keep your session secure and remember core settings. The service cannot work without them.
Preferences
Remember choices such as your workspace, environment and display settings.
Analytics
Help us understand how our website and dashboard are used so we can fix problems and improve them. We use this information in aggregate.
You can block or delete cookies in your browser settings, but essential cookies are required to sign in and use GateConsole.
9. International Transfers
GateConsole and its service providers may process information in countries other than your own. Requests you route through the AI Gateway are also processed wherever your chosen model providers operate. Where the law requires it, we rely on safeguards such as adequacy decisions and standard contractual clauses for transfers of personal data, and we ask our service providers to protect it to the same standard.
10. Children’s Privacy
GateConsole is a business product for teams building with AI and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.
11. Changes to This Policy
We may update this policy as our products and the law change. When we do, we will post the new version here and update the “Last updated” date. For material changes we will also notify you by email or in the product before they take effect. By continuing to use GateConsole after the effective date you accept the updated policy.
12. Contact Us
Questions about this policy or about how your information is handled? Our privacy team is happy to help.