TOPAI GATEWAY ← Back to Gateway Showcase

Privacy Policy

Effective Date: October 12, 2026 · Compliant with EU GDPR & ISO/IEC 42001:2023

Zero-Retention Architectural Standard: TopAI Gateway does not store, log, or persist customer prompt payloads, API inputs, or raw AI agent messages in persistent disks. All routing operations execute strictly in ephemeral volatile V8 RAM isolates and are purged immediately upon response termination.

1. Data Minimization & Zero-PII Processing

Our edge infrastructure operates on a strict zero-retention policy for API payloads. We do not sell, rent, or monetize developer or corporate data. User inputs sent to deterministic micro-services are processed in-flight with zero permanent disk writes.

2. Payment & Billing Data (Merchant of Record)

All payment transactions, credit card handling, and billing information are managed directly by our Merchant of Record, Polar Software Inc. (Polar.sh). TopAI Gateway never receives, processes, or stores raw payment card numbers or banking secrets.

3. GDPR Compliance & Cryptographic Shredding

For enterprise compliance audits under GDPR Article 17 (Right to Erasure) and DORA Article 30:

Tenant identifiers are cryptographically hashed using salted SHA-256 before telemetry emission.
Cryptographic keys associated with sensitive audit trails can be permanently shredded upon customer request, rendering telemetry mathematically unrecoverable.

4. Analytics Policy

TopAI Gateway uses cookieless, privacy-preserving edge event counters solely to aggregate total network requests, error rates, and Anycast points of presence uptime. We do not use third-party behavioral ad trackers.

5. Contact & Data Protection

For data privacy requests or DPO inquiries, please contact support@topaigateway.com.