Privacy Policy

How Model Gate processes personal data.

Last updated: 2026.09.10

This Privacy Policy explains how Model Gate collects, uses, discloses, stores and protects personal information when you use the Model Gate website, account dashboard, APIs and related services (the "Service").

Data Controller

Model Gate is operated by Salvatore Marrese, entrepreneur individuel (EI), trading as MODALIAM, SIREN 107 719 700, SIRET 107 719 700 00018, registered at 8 Résidence de la Frappière, 86000 Poitiers, France.

For purposes of applicable data-protection law, the operator acts as the controller of personal data where it determines the purposes and means of processing.

Additional operator information is available in our Legal Information.

Information We Collect

Depending on how you use the Service, we may process the following categories of information:

  • Name or display name, if provided
  • Email address and account identifiers
  • IP addresses
  • Authentication, login and security logs
  • API usage, metering and request statistics
  • API-key identifiers and account configuration information
  • Billing, transaction and payment-status information
  • Support requests and communications
  • Device, browser and website usage information
  • Cookie, analytics and affiliate-attribution identifiers where applicable
  • AI prompt and response content where required to process an API request

Sources of Personal Information

We may obtain personal information:

  • directly from you when you register, configure or use the Service;
  • automatically from your device or browser when you access the Service;
  • from payment processors in connection with purchases, refunds or disputes;
  • from authentication providers where you choose to use a supported third-party login method;
  • from affiliate or referral systems where you access the Service through a referral link or partner integration; and
  • from infrastructure, security and service providers used to operate the Service.

Purpose of Processing

We process personal information for purposes including:

  • creating and maintaining user accounts;
  • authenticating users and protecting credentials;
  • providing API access and routing requests to selected AI services;
  • measuring API usage and calculating charges;
  • processing payments, credits, refunds and billing records;
  • providing customer and technical support;
  • detecting fraud, abuse and security threats;
  • maintaining service availability and reliability;
  • complying with accounting, tax, legal and regulatory obligations;
  • measuring website usage and performance where permitted; and
  • attributing qualifying registrations or payments to affiliate partners where applicable.

Legal Bases for Processing

Where the GDPR, UK GDPR or similar laws apply, Model Gate relies on one or more of the following legal bases:

  • Performance of a contract: processing necessary to create and maintain your account, authenticate you, provide API access, meter usage, process billing and provide requested support.
  • Legitimate interests: protecting the Service against fraud and abuse, maintaining security and reliability, preventing misuse, improving operational performance and establishing or defending legal claims.
  • Legal obligations: processing required for tax, accounting, payment, regulatory, sanctions, fraud-prevention or other applicable legal requirements.
  • Consent: where required for non-essential cookies, analytics or similar technologies.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

AI Request Data

Model Gate routes AI requests to third-party AI providers according to the model selected, provider availability, technical compatibility and other routing conditions.

  • Synchronous prompt and response content is not intentionally retained after transient processing.
  • Asynchronous prompt and response content may be retained for approximately one hour where required to complete asynchronous processing.
  • Model Gate does not use customer prompts or responses to train Model Gate models.
  • Model Gate does not intentionally include your Model Gate account email, Model Gate user ID or originating IP address in upstream AI model requests.

More information is available in our AI Service Disclosure .

Cookies and Similar Technologies

The Service uses cookies, local storage and similar technologies for authentication, security, fraud prevention, preferences and service reliability.

With consent where required, Model Gate may use analytics services to understand aggregate website usage, device categories, navigation patterns and page performance.

Affiliate parameters, click identifiers and related technologies may also be used to associate a registration or qualifying payment with an affiliate source, including partner and Telegram referral integrations.

More information about these technologies and available choices is provided in our Cookie Policy.

Recipients and Service Providers

Personal information may be disclosed to service providers and other recipients only where reasonably necessary to operate, secure and provide the Service. These may include:

  • cloud hosting and infrastructure providers;
  • CDN, network-security and anti-abuse providers;
  • authentication providers;
  • payment processors;
  • analytics providers where permitted;
  • affiliate-attribution providers;
  • communications and support providers; and
  • third-party AI providers selected or used to fulfil an API request.

The provider used for an AI request may vary depending on the selected model, routing, availability and technical requirements.

A current list of relevant providers and typical processing regions is available on our Subprocessors and Service Providers page.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy or as required by applicable law.

  • Account and profile data: generally retained while your account remains active and thereafter only where necessary for legal, security or dispute-resolution purposes.
  • Billing and transaction records: retained for the period required by applicable tax, accounting, payment and financial-recordkeeping laws.
  • Authentication and security logs: retained for a period reasonably necessary to investigate fraud, abuse, security incidents and account compromise.
  • API usage and metering records: retained as necessary for billing, usage accounting, dispute resolution, abuse prevention and service operation.
  • Support communications: retained as necessary to resolve the request and maintain appropriate support, security and legal records.
  • AI content: handled according to the retention practices described in the AI Service Disclosure.
  • Cookies and similar identifiers: retained according to their purpose, expiration settings, consent status and applicable legal requirements.

When information is no longer required, we may delete, anonymize or otherwise dispose of it in accordance with applicable law.

International Data Transfers

Model Gate is operated from France, but some service providers and AI providers may process information in other countries.

Where personal data protected by the GDPR or similar legislation is transferred outside the European Economic Area or another jurisdiction that restricts international transfers, we rely on an applicable lawful transfer mechanism where required.

Depending on the recipient and destination, this may include an adequacy decision, contractual safeguards such as Standard Contractual Clauses, or another mechanism permitted by applicable law.

Information about providers and typical processing locations is available in our Subprocessors and Service Providers page.

Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • request access to personal data we hold about you;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive certain personal data in a portable format;
  • withdraw consent where processing is based on consent; and
  • lodge a complaint with a competent data-protection authority.

These rights may be subject to exceptions or limitations provided by applicable law.

GDPR and EEA Privacy Rights

If you are located in the European Economic Area, the United Kingdom or another jurisdiction providing similar data-protection rights, you may exercise the applicable rights described above.

Where processing is based on our legitimate interests, you may object to that processing where permitted by law.

Where processing is based on consent, you may withdraw your consent at any time.

You also have the right to lodge a complaint with the data-protection authority responsible for your country or region.

To exercise your privacy rights, contact [email protected].

California Privacy Notice

Model Gate is not currently a business subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), based on the applicable statutory thresholds.

If the CCPA/CPRA becomes applicable to Model Gate in the future, this Privacy Policy will be updated accordingly and applicable California privacy rights and request procedures will be provided.

Automated Processing

Model Gate may use automated systems for security monitoring, abuse prevention, fraud detection, request routing and service operation.

Where applicable law provides additional rights concerning solely automated decisions that produce legal or similarly significant effects, those rights will apply according to the circumstances of the processing.

Security

Model Gate uses reasonable administrative, organizational and technical measures designed to protect personal information against unauthorized access, disclosure, alteration, loss or misuse.

No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

Account Deletion

Users may delete their account using the available account controls where provided. Account access ends when deletion is completed.

Certain billing, accounting, fraud-prevention, security, dispute and compliance records may continue to be retained where required by law or reasonably necessary to establish, exercise or defend legal claims.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our processing activities, service providers or applicable legal requirements.

The date at the top of this page identifies the latest revision. Material changes may be communicated through the Service or another appropriate method where required.

Contact

For privacy, GDPR or personal-data requests:
Email: [email protected]

General support:
Email: [email protected]
Telegram: @model_gate_support