Privacy Policy

This Privacy Policy explains how Aditya Sunil Borgaonkar ("we", "us") collects, uses, and shares information when you use the Yantra AI gateway and dashboard (the "Service").

1. Information We Collect

• Account data: your email address and a securely hashed password. We never store your password in plain text.
• API keys: we store only a one-way hash of each key, plus a short non-secret prefix and the last four characters for display.
• Usage metadata: for each request we record the model used, provider, token counts, cost, latency, and timestamp, to meter billing and show your usage. Yantra does not store the content of your prompts or the AI's responses — only the usage metadata listed above is retained.
• Payment metadata: top-up amounts, order/transaction IDs, and status. Card and bank details are handled entirely by our payment processor — we do not see or store them.
• Technical data: IP address and request headers, used for security and rate limiting.

2. How We Use Information

• To provide, operate, and secure the Service;
• To meter usage and process payments;
• To prevent fraud and abuse and enforce our Terms;
• To communicate with you about your account (e.g. verification and password-reset emails).

3. How Information Is Shared

• AI providers: the content of each request is transmitted to the relevant third-party model provider (e.g. OpenAI, Anthropic, Google) to generate a response, subject to that provider's privacy practices.
• Payment processor: Razorpay processes payments and may collect information directly from you under their privacy policy.
• Email provider: Resend (resend.com) delivers transactional emails.
• Legal: we may disclose information where required by law or to protect our rights.

We do not sell your personal information.

4. Data Retention

We retain account and usage records for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. You may request deletion as described below; some records may be retained where the law requires.

5. Security

We use reasonable technical and organizational measures to protect your data, including password hashing, hashed API keys, and signature-verified payment webhooks. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Cookies & Local Storage

The dashboard uses your browser's local storage to keep your session token and the gateway URL you configure. We do not use third-party advertising or tracking cookies.

7. Your Rights

Subject to applicable law, you may access, correct, or delete your personal data, or object to certain processing. To exercise these rights, contact us at [email protected].

8. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

9. Changes

We may update this Policy from time to time. Material changes will be notified via the Service or email.

10. Contact

Aditya Sunil Borgaonkar
Kolhapur, Maharashtra, India
[email protected]