Privacy Policy

Yaha AI Platforms Private Limited ("Yaha") operates Yaha AI Gateway. This policy applies to our website (yahagateway.io), web console (app.yahagateway.io), and API gateway services.

For account and billing data, Yaha acts as the data controller. When your organization routes AI requests through the gateway, we process that content on your organization's behalf as a data processor. Enterprise customers may request a separate Data Processing Agreement.

We collect information needed to run the service: your account details (email, organization, role), usage metadata (models used, token counts, latency, not prompt or completion text by default), billing records processed through Razorpay, and basic website logs (IP address, browser type). If you contact us, we keep your message and email address.

We do not use cookie-based marketing analytics, and we do not sell personal information.

We use your information to provide and maintain the Services, process billing, authenticate users, send transactional emails, respond to support requests, monitor performance, and comply with legal obligations.

We share information only as needed to operate the Services. API requests, including prompt and completion content, are forwarded in full to the AI provider configured for your project (such as OpenAI, Anthropic, or Google). Those providers typically process data in the United States or the European Union. Their privacy policies apply to that data. We also use trusted service providers for payments (Razorpay), email delivery, and cloud hosting.

We may disclose information when required by law. We do not sell personal information.

Our marketing website does not set tracking cookies. The web console stores your session in browser localStorage so you stay signed in. We also use browser storage for theme preferences and workspace scope, Cloudflare Turnstile for bot protection during sign-up, and Razorpay hosted checkout for payments. We do not use marketing or analytics cookies.

For a full list of storage we use, see our Cookie Policy at yahagateway.io/cookies. You can clear browser storage through your browser settings, which will sign you out of the console.

We retain account data while your account is active and for a reasonable period afterward for legal and billing purposes. Usage logs are retained according to your organization's settings (typically 1–365 days).

We protect data with encryption in transit, encrypted storage of sensitive credentials, workspace isolation, and hashed passwords and API keys.

Depending on where you live, you may have rights to access, correct, or delete your personal information, object to certain processing, or file a complaint with a supervisory authority. Under India's Digital Personal Data Protection Act, 2023, you may withdraw consent for optional processing (including full payload storage) and raise a grievance with our Grievance Officer.

Your information may be processed in India and other countries where our providers operate. Cross-border forwarding of prompts to overseas large-language-model processors is inherent unless you route only to India-hosted models. We use appropriate safeguards for international transfers where required by law.

To exercise your rights or withdraw consent, email [email protected]. For DPDP grievances, email [email protected]. We will respond within the timeframes required by applicable law.

Questions about this policy? Contact Yaha AI Platforms Private Limited at [email protected]. Grievance Officer: [email protected].

We may update this policy from time to time. Material changes will be reflected in the effective date above. The Services are not directed at anyone under 18, and we do not knowingly collect information from children. Do not create an account if you are under 18.