Privacy Policy

Effective date: 19 August 2026

This Privacy Policy governs the collection, use, and protection of information about users of the service. We may collect account identifiers, technical information, and interaction history. Data is used to operate the service, communicate with users, and improve the product. Disclosure to third parties is limited to cases required by law, needed to fulfill obligations to the user, or made with the user's consent. Prompt and response bodies are retained for a bounded 7-day window described in Prompt logging & retention; other data is retained for as long as needed for the stated purposes. Users can request erasure of their account data from the dashboard. Data is protected with reasonable safeguards, and users remain responsible for risks inherent in transmitting data online. The Administration may update this Policy; continued use of the service constitutes acceptance of the revised version.

1. General provisions

1.1. This Privacy Policy (the “Policy”) governs how information provided by the User when using ToyGate (toygate.store) (the “Service”) is processed and protected.

1.2. By using the Service, the User agrees to this Policy. If the User does not agree, the User must stop using the Service.

2. Information we collect

2.1. The Service may collect the following categories of data:

• account identifiers (email, user ID, display name, and similar);
• technical information (IP address, browser, device, and operating system data);
• interaction history with the Service (including API request logs to the extent described in Prompt logging & retention);
• payment-order metadata (status, amount, provider order identifiers) — without payment-instrument details.

2.2. The Service does not require passports, identity documents, photographs, or other personal information beyond what is minimally necessary to operate.

3. How we use information

3.1. Collected information may be used solely to:

• provide Service functionality;
• communicate with the User (including notifications and support);
• process payments and grant AI credits;
• analyze and improve the Service.

4. Payment data

4.1. Purchases of AI-credit packages are processed by third-party payment providers (Platega, NowPayments).

4.2. ToyGate does not store bank card details, crypto wallet credentials, or other sensitive payment-instrument data. Such data is entered and processed directly by the relevant provider.

4.3. ToyGate may retain operational order records (payment id, status, amount, selected credit package) needed to grant AI credits and provide support.

5. Disclosure to third parties

5.1. The Administration does not share collected data with third parties except:

• when required by law;
• when necessary to fulfill obligations to the User (for example, payment processing via Platega and NowPayments, and model upstream providers);
• when the User has given consent.

6. Retention and security

6.1. Prompt and response bodies written to the internal prompt_logs table are retained for 7 days and then hard-deleted by a maintenance sweep, as described in Prompt logging & retention. Other data is retained for the period needed to achieve the processing purposes.

6.2. The Administration takes reasonable measures to protect data but does not guarantee absolute security of information transmitted over the internet.

7. Data erasure

7.1. An authenticated User can request erasure of their account data from the dashboard. The request is recorded and processed asynchronously; its status is reported in the dashboard.

7.2. While an erasure request is processed, the account is blocked and its sessions and API keys are revoked.

7.3. Erasure deletes stored prompt logs, generation jobs, and generated media belonging to the account. It anonymizes API request-log rows, which are retained without the account association for operational and billing integrity. On completion, the account and authentication records are removed.

7.4. A pending or failed erasure request is visible to operators, who may claim it or record a failure reason.

8. Disclaimer

8.1. The User understands and agrees that transmitting information over the internet always involves risk.

8.2. The Administration is not liable for loss, theft, or disclosure of data caused by third parties or by the User.

9. Changes to this Policy

9.1. The Administration may change this Policy.

9.2. The current version is published in the Service. Continued use after changes means the User accepts the updated Policy.

10. Contact

10.1. For privacy-related questions, contact: info@toygate.store.