Gate.AI Privacy Policy

Updated as of June 24, 2026

PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE ACCESSING OR USING THE GATE.AI SERVICES. BY ACCESSING OR USING THE GATE.AI SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD AND AGREE TO THE COLLECTION, USE, DISCLOSURE, TRANSFER AND STORAGE OF YOUR PERSONAL DATA AS DESCRIBED IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE, YOU MUST NOT ACCESS OR USE THE GATE.AI SERVICES.

1. GENERAL

1.1 At Gate ("Gate", "we", "our", "us" or the "Platform"), we value the privacy of our users and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, transfer, store and protect your personal information when you access our website at https://www.gate.ai and any associated webpages, mobile applications, application programming interfaces ("APIs"), and other platforms operated or maintained by us (collectively, the "Sites"), and when you use the AI intermediary routing services and related features, tools and functionalities made available by us (collectively, the "Gate.AI Services" or the "Services").

1.2 This Privacy Policy forms part of, and should be read together with, the Gate.AI Service Agreement (the "Service Agreement"). Unless otherwise defined herein, all capitalised terms used in this Privacy Policy shall have the same meanings ascribed to them in the Service Agreement.

1.3 "Personal Data" means any information that identifies a natural person or relates to an identifiable natural person, including information provided by you, information we collect automatically, and information we obtain from third parties, as further described below.

1.4 You acknowledge that Gate operates as an AI intermediary routing platform and is not an AI Model Provider. When you submit a Prompt, the content of your Prompt is transmitted to the applicable third-party AI Model Provider for processing. The processing of your Prompt by an AI Model Provider is governed by that AI Model Provider's own privacy policy and the laws of the jurisdiction in which it operates, and is not governed by this Privacy Policy. Please refer to Section 8 (Prompt Processing, Routing Model Training and Smart Memory) below.

2. PURPOSES OF THIS PRIVACY POLICY

2.1 This Privacy Policy sets out the types of Personal Data we may collect when you access the Sites, register and maintain an Account, and/or use the Gate.AI Services; how and why we use such Personal Data; the circumstances in which we may disclose or transfer it; how long we retain it; the security measures we apply; and the rights and choices available to you in respect of your Personal Data.

3. YOUR CONSENT

3.1 By accessing the Sites or using the Gate.AI Services, whether or not you have registered or logged in, you signify your acceptance, understanding and confirmation that:

(a) you, on the basis of your own free will, consent to the collection, use, disclosure, transfer and storage of your Personal Data in accordance with this Privacy Policy;
(b) you will comply with all the terms and conditions of this Privacy Policy and the Service Agreement;
(c) we may collect your information through your access to and registration with the Sites and your use of the Gate.AI Services; and
(d) we may, from time to time and in accordance with Section 16 (Modification to this Privacy Policy), amend this Privacy Policy.
(e) You agree that our branches, affiliates and employees may contact you in connection with the products and Services that in our reasonable opinion you may be interested in (unless you have indicated in writing to us that you do not want to receive such information).

3.2 Separate and independent consents. By default, we do not store your Prompts or the Outputs generated in response to them, and we do not use them to train or optimise our internal Routing Model. Certain processing activities described in this Privacy Policy are carried out only where you have given separate, specific and independent consent, as described below:

(a) Data Storage Consent – Through the consent mechanism provided in the Gate.AI Services settings interface, you may give your consent for us to store your Prompts and the Outputs generated in response to such Prompts. This consent is off by default, is obtained separately from any other consent, and may be enabled or disabled by you independently at any time.
(b) Routing Model Training Consent – We are implementing a separate and independent consent mechanism through which you may, in addition to and conditional upon your Data Storage Consent, choose to allow us to use such stored Prompts and Outputs to train and optimise our internal Routing Model. Until this consent mechanism is made available and you have enabled it, we do not use your Prompts or Outputs to train or optimise our Routing Model.

3.3 Where our processing is based on your consent, you may withdraw that consent at any time through the settings interface or by contacting us at the email address in Section 17. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal, and does not affect processing that we are permitted or required to carry out on another lawful basis (for example, to comply with legal, accounting, billing or audit obligations).

4. INFORMATION WE COLLECT

4.1 Depending on how you access and use the Sites and the Gate.AI Services, we may collect the following categories of Personal Data and related information:

(a) Account, Identity and Authentication Information. Information used to register, identify and authenticate you and your Account, such as your email address, cryptocurrency wallet address, Account/user identifier (user_id), API key identifier (api_key_id), API key name and ownership type, organisation identifier, group identifier, and application source identifier (App-Id / Source). Where you choose to register or sign in through a third-party login provider, we may receive certain profile information from that provider, such as your email address, display name (nickname) and profile picture (avatar), in accordance with the scope of authorisation you grant and that provider's privacy policy. We are not responsible for the data practices of any third-party login provider prior to the point at which such information is received by us, and your use of any third-party login is subject to that provider's own terms and privacy policy.
(b) Payment Information. Information relating to fees and transactions, such as your selected payment method (Gate Pay, cryptocurrency wallet or credit card) and billing and payment records. Where you pay by credit card (if applicable), the card details are processed directly by our third-party payment processor; Gate does not collect, access or store your full card number.
(c) Network and Device Information. Information collected automatically when you interact with the Sites and Services, including your client IP address, User-Agent string, request path, HTTP method, response status code, response size, request and response latency, and trace and span identifiers (TraceID / SpanID). Browser and device characteristics may be inferred from request headers such as the User-Agent and Referer rather than collected as separate structured data.
(d) Prompt and Output Content. The content of the Prompts you submit and the Outputs returned to you, including the requested model, the model finally routed to, model parameters contained in the request body, and the messages, input, system and instruction content. Storage of Prompt and Output content is subject to your Data Storage Consent, save where we are otherwise permitted or required to process such content (for example, for security, billing verification, dispute resolution or legal compliance).
(e) Routing Model Data. Data used to determine the optimal routing of your Prompt, including the API key, extracted message text, message role, multimodal type markers and the candidate model list transmitted to the Automatic routing service, together with the routing results recorded by us (such as intent, sub-intent, difficulty, capability requirements, recommended and alternative models, confidence score and routing reason).
(f) Usage, Token and Billing Data. Usage and computational records, including input tokens, output tokens, total tokens, cache read/write tokens, token breakdowns, upstream usage data reported by AI Model Providers, input/output/cache and total cost, billing rule identifiers, response status, total latency and first-token latency.
(g) Response Content Data. Information relating to model responses, including the response body and headers, content type, response size, whether the response was streamed, and the associated request / usage log identifiers.
(h) Log and Observability Data. Access and operational logs recording request path, IP address, User-Agent, model, user identifier, API key identifier, source, latency and status code. Authorisation credentials are masked (redacted) in access logs.
(i) Smart Memory Data. The optional Smart Memory feature is not yet available; we are developing it. When it becomes available and you enable it, your conversational history (Prompts and Outputs) will be retained to provide cross-session contextual continuity, as described in Section 8.6.
(j) Correspondence and Support Information. Records of your communications with us, including support desk comments, billing dispute submissions, survey responses and other text-based content you submit to us.

4.2 You acknowledge that the inclusion of any personal data or sensitive information in your Prompts is at your own discretion, and that you are solely responsible for the content of your Prompts and for ensuring that your submission of any personal data complies with all applicable data protection and privacy laws.

5. HOW WE COLLECT PERSONAL DATA

5.1 We collect your Personal Data in the following ways:

(a) directly from you, when you register an Account, configure your settings and consents, submit Prompts, make payments, or contact us;
(b) automatically, through your use of the Sites and Services and through cookies and other tracking technologies (see Section 6);
(c) through your use of AI-assisted features (including the Gate.AI Services), which generate, or enable us to infer, information such as Prompts, responses, interaction history, model outputs, feedback signals, quality-review annotations and system logs;
(d) from publicly available sources; and
(e) from third parties, such as our service providers, payment processors and affiliates, to the extent necessary to provide and operate the Services.

6. COOKIES POLICY

6.1 Cookies are small text files or identifiers placed on your device when you visit a website. We use the following categories of cookies on the Sites:

(a) Strictly Necessary Cookies (login session). These cookies maintain your login session and recognise your authenticated identity so that you do not need to log in again when navigating between pages or refreshing. They are essential to the operation of the Sites, cannot be disabled, and do not require your consent.
(b) Functional Cookies (language preference). These cookies record your selected interface language (for example, Chinese or English) so that the corresponding language version is presented automatically on your next visit.
(c) Functional Cookies (user preference fields). These cookies store your personalised settings (such as theme, display mode and default filters) in order to restore your preferred interface state on subsequent visits.

6.2 Analytics. We use a third-party analytics provider to understand how the Sites and Services are used. This includes product event tracking, the automatic capture of certain interactions (such as clicks and hovers), and page-exposure measurement. We use this information to operate, analyse, secure and improve the Services.

6.3 Third-party cookies and advertising. Some of the tracking and storage technologies we use are provided by third-party analytics service providers to supply us with analytics and intelligence about how the Sites and Services are used. We use this information only to operate, analyse, secure and improve the Services. We do not use these technologies to serve targeted advertising.

6.4 Managing cookies. Most browsers accept cookies automatically, but you may stop, restrict or delete cookies by adjusting your browser or device settings. If you disable cookies, certain functions of the Sites may not be available or may not work properly. We do not otherwise respond to "Do Not Track" signals transmitted by browsers.

7. USE OF INFORMATION

7.1 We use the Personal Data we collect for the following purposes:

(a) to operate, maintain and provide the Gate.AI Services, including gateway operation and the routing of your Prompts to AI Model Providers and the return of Outputs to you;
(b) to authenticate you, attribute requests to your Account, and manage your Account, settings, consents and permissions;
(c) to calculate and process fees, perform billing and deduction, conduct budget and guardrail control, verify usage, and resolve billing disputes;
(d) to evaluate and improve the performance and effectiveness of our routing and Automatic routing functions, including offline re-computation, shadow evaluation, comparison and settlement analysis;
(e) where you have provided Data Storage Consent and Routing Model Training Consent, to store and use your Prompts and Outputs to train and optimise our internal Routing Model (see Section 8);
(f) to detect, prevent and address fraud, abuse, security risks, malicious activity and violations of the Service Agreement or applicable law, including automated and manual detection measures that we may implement from time to time;
(g) to conduct troubleshooting, auditing, traffic and quality analysis, and to maintain the stability and security of the Platform;
(h) to communicate with you regarding your Account, the Services, and changes to our terms or policies, and to respond to your enquiries and requests;
(i) to comply with applicable laws, regulations and lawful requests from competent authorities, and to establish, exercise or defend legal claims;
(j) to personalise your experience and, where the Smart Memory feature becomes available and you have enabled it, to provide cross-session contextual continuity in accordance with Section 8.6; and
(k) for any other purpose disclosed to you at the time of collection, or for which you have given your separate and specific consent.

7.2 Automated decision-making. Our Automatic routing functions involve automated processing, including the automated assessment of your Prompts to determine intent, difficulty and the most suitable AI Model. Such routing does not produce legal effects concerning you or similarly significantly affect you. Where any automated decision would produce such effects, we will implement appropriate safeguards, and you may have the right to obtain human intervention, to express your point of view and to contest the decision.

7.3 AI-assisted outputs. Outputs are generated by third-party AI Models and are provided for general informational purposes only. They do not constitute financial, investment, trading, legal or tax advice, or any representation, warranty or guarantee by Gate. AI technologies are not infallible, and Gate does not guarantee that any Output will be accurate, complete, current, uninterrupted or error-free.

8. PROMPT PROCESSING, ROUTING MODEL TRAINING AND SMART MEMORY

8.1 Transmission of Prompts to AI Model Providers. When you submit a Prompt, the content of your Prompt is transmitted to the applicable third-party AI Model Provider for processing. Only the Prompt content is transmitted to the AI Model Provider; your Account information (such as your username, email address or other personally identifiable account data) is not shared with AI Model Providers. Such transmission may involve the transfer of data across international borders. The processing of your Prompt by the AI Model Provider is governed by that provider's own privacy policy, and we encourage you to review it.

8.2 Data processing agreements and provider opt-out. We have entered into data processing agreements with the AI Model Providers integrated into the Gate.AI Services, and, where the relevant AI Model Provider offers such an option, we have opted out, at the technical level, of the use of transmitted Prompts to train the providers' own models. We do not, however, control and are not responsible for how AI Model Providers process, store or use Prompts and Outputs once transmitted to them.

8.3 Automatic routing. Where automatic routing is enabled, the Automatic routing service processes the Automatic routing Data described in Section 4.1(e) to determine the most suitable AI Model for your Prompt. Where automatic routing is disabled and you designate a specific AI Model, a shadow copy of certain request data may be processed asynchronously for evaluation, comparison and settlement analysis purposes, without affecting the actual routing of your Prompt.

8.4 Data Storage Consent. We store your Prompts and the corresponding Outputs only where you have separately provided Data Storage Consent through the settings interface. Absent such consent, we do not retain your Prompt and Output content beyond what is necessary to route the Prompt and return the Output and to retain token usage, billing and log records as described in this Privacy Policy and the Service Agreement.

8.5 Routing Model Training Consent and sensitive-data filtering. We do not currently use your Prompts or Outputs to train or optimise our internal Routing Model, and the Routing Model Training Consent mechanism is not yet available. If and when that consent mechanism becomes available and you provide Routing Model Training Consent (in addition to your Data Storage Consent), your stored Prompts and Outputs may then be used to train and optimise our internal Routing Model. The Routing Model is solely an internal routing-optimisation tool; it does not belong to any AI Model Provider and does not itself generate any Output. We are developing an automated content-filtering mechanism designed to detect and remove personal data and sensitive information (such as names, identification numbers and payment card numbers) from content before it is used for Routing Model training. Until that consent mechanism is available, you have enabled it and such filtering is in place, we do not use your Prompts or Outputs for Routing Model training. You remain solely responsible for the content of your Prompts and must not submit personal data of third parties or other sensitive information unless you have the legal right to do so. We recommend that you do not include any personal or sensitive information in your Prompts.

8.6 Smart Memory. Smart Memory is an optional feature that we are developing and that is not yet available. When Smart Memory becomes available and you enable it, it will retain your conversational history of Prompts and Outputs across sessions to provide cross-session contextual continuity. You will be able to disable Smart Memory at any time, after which no further conversational history will be retained for contextual continuity purposes. You will also be able to request deletion of the conversational history stored under Smart Memory through our designated support channel, and we will process such requests within thirty (30) days, except to the extent that we are required to retain data to: (i) resolve any pending billing disputes; (ii) comply with applicable legal obligations; (iii) fulfil the requirements of any ongoing legal proceedings or investigations; or (iv) where you have not withdrawn your Data Storage Consent and Routing Model Training Consent, fulfil the requirements of Routing Model training.

8.7 No general content monitoring. We do not actively monitor, review or filter the content of your Prompts or Outputs as a matter of course, except as permitted under the acceptable use provisions of the Service Agreement, or as required by applicable law or legal process. For the avoidance of doubt, our processing of Prompts and Outputs for Routing Model training does not constitute such monitoring, review or filtering.

9. HOW WE SHARE AND DISCLOSE PERSONAL DATA

9.1 We do not sell or rent your Personal Data, and we do not share your Personal Data for cross-context behavioural advertising. Except in connection with the third-party analytics technologies described in Section 6 (Cookies Policy), we do not permit third parties to collect, access or use your Personal Data for their own independent purposes. We may, however, disclose or transfer your Personal Data in the following circumstances:

(a) AI Model Providers. We transmit the content of your Prompts to the applicable AI Model Provider as necessary to route your Prompt and return the Output, as described in Section 8.
(b) Service providers. We engage trusted service providers to operate and support the Services, including cloud hosting and storage, payment processing and analytics. Such providers may access your Personal Data only to perform services on our behalf and are bound by contractual obligations to keep it confidential and to use it only for the purposes for which we disclose it.
(c) Affiliates. We may share Personal Data with our subsidiaries, holding companies and companies under common control, for the purposes described in this Privacy Policy.
(d) Corporate transactions. We may disclose Personal Data in connection with any financing, merger, acquisition, due diligence, reorganisation, receivership or dissolution involving the transfer of some or all of our business or assets.
(e) Legal and regulatory. We may disclose Personal Data where we reasonably believe it is necessary to comply with applicable laws, regulations, subpoenas, court orders or lawful requests from law enforcement or other competent authorities, to enforce the Service Agreement or our policies, or to protect the rights, property or safety of Gate, our users or the public.

9.2 Where we disclose Personal Data to a service provider or other third party that performs activities on our behalf, that party may only use your Personal Data for the specific purpose for which we supply it.

10. TRANSFER OF PERSONAL DATA

10.1 We store Personal Data on third-party cloud infrastructure located in Tokyo, Japan. Your Personal Data may also be transferred to, accessed from or processed in other jurisdictions, including in connection with the transmission of Prompts to AI Model Providers and the use of our service providers. Certain limited categories of data, such as analytics and usage-interaction data, may be processed by analytics service providers that operate from jurisdictions other than Japan. Such processing is limited to the purposes described in Section 6.

10.2 By using the Sites and Services, you consent to the transfer of your Personal Data to such jurisdictions for the purpose of providing the Services to you, even where the destination jurisdiction may provide a different level of protection for Personal Data than your jurisdiction of residence. We implement security measures consistent with our obligations under applicable law, and, where required, rely on appropriate transfer mechanisms (such as the standard contractual clauses or other safeguards required under applicable law).

11. DATA SECURITY

11.1 We adopt appropriate physical, electronic, organisational and technical measures designed to protect your Personal Data against accidental loss and unauthorised access, use, alteration or disclosure. These measures include access controls and authentication, the redaction of authorisation credentials in our access logs, encryption in transit, network firewalls, and contractual confidentiality obligations on personnel and service providers granted access on a need-to-know basis.

11.2 The security of your information also depends on you. You are responsible for maintaining the confidentiality and security of your Account credentials, passwords and API keys, and should not share them with any person.

11.3 No method of transmission over the internet or method of electronic storage is completely secure. While we take reasonable steps to protect your Personal Data, we cannot guarantee its absolute security, and any transmission of Personal Data is at your own risk. To the fullest extent permitted by applicable law, we shall not be liable for any loss or damage arising from unauthorised access to or circumvention of our security measures.

11.4 If you become aware of any security vulnerability affecting the Sites or Services, please contact us promptly at the address in Section 17 so that we can take appropriate action.

11.5 In the event of a personal data breach affecting your Personal Data, we will notify the relevant supervisory authority and, where required, affected users, only to the extent and within the timeframes required by applicable law. Nothing in this Privacy Policy obliges us to provide notification beyond what is required under Applicable Laws.

12. DATA RETENTION

12.1 We retain Personal Data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, to provide the Services, to comply with our legal, regulatory, accounting and reporting obligations, to pursue legitimate business purposes, and to establish, exercise or defend legal claims. The following retention periods apply:

(a) Account registration information, and billing and payment records, are retained for a period of not less than seven (7) years from the date of collection or the closure of your Account, whichever is later, in order to comply with applicable laws (including data protection, anti-money laundering, accounting and reporting requirements) and for dispute-resolution purposes.
(b) Where you have provided Data Storage Consent and Routing Model Training Consent, Prompt and Output data, and (where Smart Memory is enabled) Smart Memory conversational history, are retained for a period of seven (7) years from the date of collection for the purposes of Routing Model training and optimisation, compliance with applicable laws (including limitation periods and audit requirements) and dispute resolution, after which such data is deleted in accordance with our data retention policy unless a longer period is required by applicable law. If you withdraw your Data Storage Consent and/or Routing Model Training Consent (as described in Section 3), we will cease the corresponding storage and/or training use of such data and will delete or anonymise it, except to the extent that we are required or permitted to retain it under applicable law or for the purposes set out in paragraph (a) above.
(c) Operational logs are retained according to their type and purpose: access and in-service database logs are retained for approximately ninety (90) days for security, audit and platform-integrity purposes; and other system logs are retained for shorter periods and are rotated, deleted or anonymised periodically in accordance with our internal data retention policy.
(d) Where automated content-detection (keyword scanning) measures are applied under the acceptable use provisions of the Service Agreement, the related scanning records are retained for approximately three (3) days.

12.2 At the end of the applicable retention period, we will securely delete, destroy or anonymise the relevant data, and require our sub-processors and service providers to do likewise, except where retention is required by applicable law. Where we anonymise data such that it can no longer be associated with you, we may retain and use such anonymised data without further notice to you, including for analytics and for service and model improvement purposes.

13. MINORS

13.1 You must be at least 13 years of age to use the Gate.AI Services. If you are under 18 years of age or under the age of legal majority in your jurisdiction (whichever is higher), you must have the consent of your parent or legal guardian to use the Services, and your parent or legal guardian must agree to this Privacy Policy and the Service Agreement on your behalf.

13.2 We do not knowingly collect Personal Data from any person under 13 years of age. If we become aware that we have collected Personal Data from such a person without appropriate consent, we will delete that Personal Data unless we are legally required to retain it. If you are a parent or legal guardian and believe that a minor has provided us with Personal Data without your consent, please contact us at support@gate.ai so that we can take appropriate action.

14. RESIDENTS WITHIN THE EUROPEAN ECONOMIC AREA (EEA) AND THE UNITED KINGDOM

14.1 If you are located in the EEA or the United Kingdom, you may have certain rights under the EU General Data Protection Regulation (EU) 2016/679 and the UK GDPR (together, the "GDPR"). This Section applies to you in addition to the other provisions of this Privacy Policy.

14.2 Legal bases. We process Personal Data subject to the GDPR on one or more of the following legal bases:

(a) Contractual necessity – to perform our contract with you under the Service Agreement, including to provide and operate the Gate.AI Services, route your Prompts, process payments and provide support;
(b) Legitimate interests – where necessary for our legitimate interests and not overridden by your interests or fundamental rights, such as securing and improving the Services, performing real-time routing decisions, shadow evaluation and settlement analysis (other than the training of our Routing Model, which is carried out on the basis of your consent), preventing fraud and abuse, and creating aggregated, de-identified or anonymised data;
(c) Consent – where you have given consent for a specific purpose, including your Data Storage Consent, your Routing Model Training Consent, and the use of non-essential analytics cookies where applicable; and
(d) Compliance with legal obligations – including anti-money laundering, sanctions, accounting, tax, audit, retention and other regulatory obligations, and responding to lawful requests from public authorities.

14.3 Your rights. Subject to the conditions and exceptions under applicable law, you have the rights of access, rectification, erasure, restriction of processing, objection (including to processing based on legitimate interests), data portability, and withdrawal of consent, as well as the right to lodge a complaint with your local supervisory authority. We will assess each request, and may require verification of your identity before responding. Requests relating to Routing Model training will be given effect in accordance with your withdrawal of consent, subject to our legal obligations to retain certain records. We will respond to a verified request without undue delay and within one (1) month of receipt, which period we may extend by up to two (2) further months where necessary, taking into account the complexity and number of requests, in which case we will inform you of the extension. Where a request is manifestly unfounded or excessive, in particular because of its repetitive character, we may charge a reasonable fee or decline to act on the request, as permitted under applicable law.

14.4 International transfers. The Personal Data we collect may be transferred to, and processed in, countries other than your own, including countries that may not provide an equivalent level of data protection. Where such transfers take place, we put in place appropriate safeguards as required by applicable law. To exercise your rights or to request further information about these safeguards, please contact us at the address in Section 17.

15. ADDITIONAL DISCLOSURES FOR UNITED STATES RESIDENTS

15.1 If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have additional rights, subject to the conditions and exceptions under applicable law. This Section applies to you in addition to the other provisions of this Privacy Policy.

15.2 Categories of Personal Data. The categories of Personal Data we collect are described in Section 4 and include identifiers and Account information, payment information, network and device information, internet and electronic activity information (including Prompt and Output content where stored), and inferences drawn for routing purposes. The sources, purposes and disclosures are described in Sections 4 to 9.

15.3 No sale or sharing. We do not "sell" your Personal Data for monetary consideration, and we do not "share" your Personal Data for cross-context behavioural advertising, as those terms are defined under applicable U.S. state privacy laws.

15.4 Your rights. Subject to applicable law, you may have the right to know and access the Personal Data we have collected, to request correction or deletion, and to be free from discrimination for exercising your rights. As described in Section 15.3, we do not sell or share your Personal Data for cross-context behavioural advertising. You may exercise these rights, or use an authorised agent to do so, by contacting us at the address in Section 17. We may verify your identity before responding.

16. MODIFICATION TO THIS PRIVACY POLICY

16.1 We may amend this Privacy Policy from time to time. We will publish the modified version on the Sites and update the "Last Updated" date at the top of this Privacy Policy. Where we make material changes to how we collect, use or disclose the Personal Data of registered users, or that affect users' rights under this Privacy Policy, we will provide registered users with advance notice by email. You are responsible for ensuring that we have an up-to-date and deliverable email address. Your continued access to or use of the Sites or Services following the posting of, or notice of, a revised Privacy Policy constitutes your acceptance of the changes.

17. CONTACT US

17.1 If you have any questions about this Privacy Policy or about how we process your Personal Data, or if you wish to exercise any of your rights, please contact our Data Protection Officer at support@gate.ai, which is the only valid and official email address through which we communicate with you on privacy matters.

18. GOVERNING LAW

18.1 This Privacy Policy and any dispute arising out of or in connection with it are governed by, and construed in accordance with, the laws of the Republic of Panama, without regard to its conflict-of-laws principles, and subject to the dispute-resolution provisions of the Service Agreement. The additional rights described in Section 14 and Section 15 apply to the extent required by the GDPR or applicable U.S. state privacy laws, respectively.

19. LANGUAGES

19.1 This Privacy Policy may be published in different languages. In the event of any discrepancy, ambiguity or omission between the English version and any translated version, the English version shall prevail.