Privacy Policy

Introduction

TamgaLabs ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI Gateway platform and related services.

By using TamgaLabs, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you register for an account, we collect your name, email address, and password (stored as a hashed value). You may optionally provide your company name and phone number in your profile settings.

API Usage Logs

When you make API requests through our platform, we automatically collect metadata including the model accessed, number of tokens processed, request duration, timestamp, and HTTP status code. We do not log the content of your API requests or responses beyond what is necessary for billing and rate limiting.

Payment Information

Payment processing is handled by our payment partner Creem. We do not store credit card numbers or other sensitive payment credentials on our servers. Creem may collect billing information in accordance with their own privacy policy.

Cookies and Tracking

We use essential cookies to maintain your session and authentication state. These cookies are necessary for the platform to function. We do not use cookies for advertising or tracking purposes. You can configure your browser to reject cookies, but this may affect platform functionality.

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our AI Gateway services
• To process transactions and manage your account credits
• To calculate usage-based billing and generate invoices
• To monitor and improve platform performance and reliability
• To enforce rate limits and prevent abuse of our services
• To communicate with you about service updates, billing, and support
• To comply with legal obligations and enforce our Terms of Service

3. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share data in the following circumstances:

• Service Providers: We share data with third-party AI model providers solely for the purpose of processing your API requests. These providers receive only the necessary request data and do not receive your account credentials.
• Payment Processing: We share necessary billing information with Creem for payment processing.
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests from public authorities.

4. Data Security

We implement industry-standard security measures to protect your data:

• All API traffic is encrypted using TLS 1.2 or higher
• Passwords are hashed using bcrypt with a cost factor of 12
• API keys are stored as SHA-256 hashes and shown only once upon creation
• Database connections are secured and access is restricted
• Regular security audits and penetration testing are performed

5. Data Retention

We retain your account information for as long as your account remains active. Usage logs are retained for 12 months for billing and analytics purposes. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Portability: Request transfer of your data to another service
• Objection: Object to the processing of your personal data

To exercise any of these rights, please contact us at support@tamgalabs.tr.

7. Third-Party Services

Our platform integrates with third-party AI model providers. Each provider has its own privacy policy governing how they handle data submitted through their APIs. We recommend reviewing these policies for more information about their data practices.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through a notice on our platform. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: support@tamgalabs.tr
Response time: We aim to respond within 24 hours on business days.