Skip to main content

Privacy Policy

Effective July 30, 2026

Stogas LLC (“Stogas,” “we,” “us”) operates an AI gateway designed to collect as little personal information as practical. We do not require a name, email address, or phone number to create an account, and we do not write prompts or outputs to our logs. This Policy explains what we handle when you use our websites, dashboard, API, CLI, and related services (the “Services”), why we handle it, how long we keep it, and what you control.

Your use of the Services is also governed by our Terms of Service.

1. What we do not do

  • We do not sell or rent personal information, and we do not share it for advertising.
  • We do not use prompts and outputs to train AI models, and we do not provide them to anyone for that purpose.
  • We do not write plaintext prompts, files, or outputs to our request logs, analytics, or backups.
  • We do not require a name, email address, or phone number to create an account.
  • We do not run advertising trackers or third-party analytics on our sites.

2. What we handle

Account and security

Account and organization records, protected access credentials, authentication settings such as passkeys and authenticator enrollment, active sessions, and security events such as sign-ins and credential changes. Session records keep a short browser and device description so you can recognize and revoke a session.

Usage metadata

One record per completed request containing its identifier, the organization, API key, model deployment and provider that served it, token counts, price, timing, outcome, and the identity of the attested node that handled it. These records power your dashboards, billing, and support, and they never contain request or response content.

Billing

Balances, holds and settlements, top-up history, invoice records, and payment evidence needed to credit an account.

Request content

Prompts, files, instructions, and outputs. Stogas holds this content in service infrastructure only while a request is being completed. Browser-based features may keep a local copy on your device as described below.

Technical information

Limited network, device, request, error, and availability signals needed to route traffic, enforce limits, secure the Services, and diagnose failures.

Some interactive features store preferences, drafts, or recent working content in your browser so they can resume on that device. This local data is not synced to your account or stored in Stogas request logs. You can remove it through the relevant interface or by clearing site data in your browser. Submitting content still transmits what is needed to perform the request.

3. How AI requests are handled

Request content is processed through privacy-preserving infrastructure only for the time needed to complete your request. It is not added to request logs, analytics, or account history.

The model provider you select receives the content needed to answer your request and processes it under its own terms. Our catalog lists each provider’s published privacy practices. You control the content submitted and select the model provider. Stogas processes that content only to deliver and secure the requested inference, enforce the terms that apply to the request, and meet applicable legal obligations.

Where required by law or a selected provider’s rules, inputs may be screened during confidential processing or by a moderation service used for that request. Stogas does not retain request content for moderation.

4. Why we handle it

  • to provide, maintain, and secure the Services;
  • to authenticate users and protect accounts, keys, and infrastructure;
  • to complete requests, price them, and keep balances accurate;
  • to detect fraud, abuse, errors, and security incidents;
  • to answer support requests and resolve disputes; and
  • to comply with applicable law and enforce our Terms of Service.

Where European or United Kingdom data protection law applies, we rely on performance of our contract with you, our legitimate interests in service integrity and abuse prevention, and our legal obligations. We do not rely on consent for advertising because we do not advertise to you. Organizations that need a written data processing agreement can contact us.

5. Payments

Cryptocurrency transfers are recorded on public networks outside our control, which can reveal addresses, amounts, and transaction history. If we offer a card or bank payment method, that processor collects payment details directly under its own privacy policy.

We use payment information to confirm and credit payments, keep balances accurate, prevent fraud, meet legal obligations, and resolve disputes.

6. Who receives information

We disclose information only where it is needed:

  • to the model provider you select, and any moderation service required for that request, so the request can be processed;
  • to service providers that supply hosting, network and edge protection, databases, analytics, payments, monitoring, or professional services, each limited by contract to what we ask them to do;
  • when required by law, or where reasonably necessary to address fraud, abuse, a security incident, or a threat to rights or safety; and

Except for the selected model provider and any moderation service required for the request, these recipients receive only the operational, account, or payment information necessary for their role—not plaintext prompts or outputs—when supported client encryption is used.

We review legal requests, require valid process, and disclose only what applicable law requires. Because Stogas does not retain request content after processing, information available for later disclosure ordinarily consists of account, billing, security, and usage metadata.

7. How long we keep it

  • Request content: not retained by Stogas after the request finishes. A local browser copy may remain on your device until you clear it.
  • Usage metadata and billing records: kept while they support your dashboards, invoicing history, and dispute resolution.
  • Sessions and authentication challenges: deleted automatically once they expire.
  • Accounts: kept while active. Accounts that were never funded and remain unused are deleted after six months. Deletion from the dashboard removes your account and its data, except records still required for billing, fraud prevention, security, disputes, or law.
  • Payment and compliance records: kept for the periods applicable law requires.

8. Security

We use technical and organizational safeguards appropriate to the sensitivity of the information we handle. Accounts support passkeys and authenticator apps, sessions can be revoked, and API keys can be independently scoped and rotated. Access to operational systems is restricted, monitored, and rate limited.

No service is perfectly secure. Keep credentials private, revoke sessions and keys you no longer trust, and report a suspected vulnerability to ops@stogas.ai.

9. Your controls and rights

From the dashboard you can rotate or revoke API keys, issue scoped keys for delegated access, revoke sessions on other devices, replace your account credentials, and delete your account.

Depending on where you live, you may also have rights to access, correct, delete, port, restrict, or object to certain processing, to appeal a decision, and to complain to your regulator. We do not treat you differently for exercising them. Authenticated access is how we confirm that a request relates to your account. We may ask for additional information when required to verify a request or comply with law.

10. International use and children

We operate from the United States and use infrastructure in multiple countries, so information may be processed outside your own, subject to the safeguards applicable law requires. The Services are not directed to children under 13, and you must meet any higher minimum age that applies where you live.

11. Changes and contact

We may update this Policy as the Services or the law change. We will revise the effective date and give any notice the law requires. Privacy questions and rights requests can be sent to ops@stogas.ai.