Privacy Policy

Last updated: 2026-11-02

1. Introduction

AI Gateway ("we", "our", or "us") operates the AI Gateway service (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Data You Provide

  • Account Data: Email address, username, and optional profile information when you register.
  • Site Configuration: URLs, domain names, and sitemap locations you submit for indexing.
  • Content Data: Public web content crawled from sites you authorize (stored as structured chunks for AI indexing).
  • Communications: Messages you send via support forms or email.

2.2 Automatically Collected Data

  • Usage Data: IP address, browser type, pages visited, time spent, and feature usage patterns.
  • Technical Logs: Server logs, error reports, and performance metrics for system maintenance.
  • Cookies: Essential cookies for authentication and session management (no tracking cookies).

2.3 AI Processing Data

When you submit a website for indexing, our system:

  • Crawls publicly accessible pages (respecting robots.txt)
  • Extracts and chunks text content for semantic search
  • Generates vector embeddings using local ML models (no third-party API calls by default)
  • Stores structured metadata (titles, URLs, timestamps) for llms.txt generation

We do not: sell your data, train public AI models on your content without consent, or share crawled content with third parties except as required by law.

2.4 Payment Data

When you purchase AI Credits:

  • We do NOT store your full credit card number, CVV, or banking details
  • Our payment processor (Suby/Stripe) handles all sensitive payment information
  • We only store: transaction ID, amount, date, credit pack purchased, and your account ID
  • Receipts are sent to your registered email address

For more details, see our payment processor's privacy policy: Suby Privacy Policy.

3. How We Use Your Data

  • Provide, maintain, and improve the AI Gateway Service
  • Generate llms.txt files and JSON-LD structured data for your websites
  • Enable semantic search and RAG-ready content indexing
  • Send service updates, security alerts, and administrative messages
  • Respond to your comments, questions, and support requests
  • Monitor and prevent abuse, fraud, or technical issues
  • Comply with legal obligations and enforce our Terms of Service

4. Data Retention & Deletion

We retain your data only as long as necessary:

  • Account data: Until you delete your account or request deletion
  • Crawled content: Until you remove a site or request re-crawling
  • Logs and analytics: Up to 12 months for security and debugging
  • Deleted data: Permanently removed from active systems within 30 days

You may request deletion of your data at any time via your dashboard or by contacting support@aigateway.dev.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. Limited sharing may occur only when:

  • Service Providers: Trusted infrastructure partners (hosting, email delivery) under strict data processing agreements
  • Legal Requirements: To comply with subpoenas, court orders, or government requests
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice)
  • With Your Consent: When you explicitly authorize sharing for integrations or exports

All third parties are contractually obligated to protect your data and use it only for specified purposes.

6. Your Rights (GDPR/CCPA)

Depending on your location, you may have the right to:

  • βœ“ Access, correct, or delete your personal data
  • βœ“ Export your data in a machine-readable format
  • βœ“ Object to or restrict certain processing activities
  • βœ“ Withdraw consent for optional data processing
  • βœ“ Lodge a complaint with your local data protection authority

To exercise these rights, contact us at privacy@aigateway.dev. We respond to verified requests within 30 days.

7. Data Security

We implement industry-standard safeguards:

  • Encryption in transit (TLS 1.3) and at rest (AES-256)
  • Regular security audits and penetration testing
  • Principle of least privilege for internal access
  • Automated monitoring for suspicious activity

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong passwords and enable 2FA where available.

8. International Data Transfers

AI Gateway is operated from the European Union. If you access the Service from outside the EU, your data may be transferred to and processed in the EU. We ensure appropriate safeguards (Standard Contractual Clauses, adequacy decisions) for any cross-border transfers.

9. Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us immediately and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notice at least 30 days before they take effect. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

Questions about this Privacy Policy? Reach out: