Privacy Policy

Tollgate ("we", "our", or "us") respects your privacy and is strongly committed to protecting it. Tollgate provides an infrastructure observability platform that calculates real-time gross margin for AI agents by analyzing token usage and billing metrics. This Privacy Policy describes what information we collect, how we use it, and your rights regarding that information.

Because Tollgate operates at the infrastructure layer of your AI workloads, we maintain a strict Zero Payload Retention policy:

• We NEVER collect, store, or transmit your users' prompts.
• We NEVER collect, store, or transmit LLM completions or responses.
• We NEVER ingest raw text, audio, images, or files passed to your AI agents.

Our SDKs systematically strip prompt and completion content before payloads ever leave your servers. We only track volumetric metadata (e.g., token counts).

We collect the following categories of information:

• Account Information: Name, email address, company name, and authentication credentials (including SSO/OIDC data).
• Telemetry & Usage Data: SDK-reported metadata, including provider model names, input/output token counts, reasoning tokens, cache hit rates, tool-call volumes, latency metrics, and anonymized user/customer IDs provided by you.
• Billing Information: Pricing models, revenue unit configurations, and connected billing integration IDs.

For payments made to Tollgate, we utilize Razorpay as our secure third-party payment processor. When you subscribe to our services:

• We do not store your full credit card number, UPI details, or banking information on our servers.
• Billing details such as name, billing address, and transaction history are processed securely via Razorpay in accordance with their Privacy Policy.
• We retain only the transaction identifiers and subscription status necessary to provision your Tollgate account access.

We use the collected information to:

• Provide, operate, and maintain the Tollgate platform.
• Calculate financial performance, margins, and agent unit economics.
• Send critical alerts to your configured channels (e.g., Email, Webhook).
• Process transactions via Razorpay and manage your subscription.
• Improve our algorithms, dashboards, and SDK performance.

We implement enterprise-grade security measures. All data is encrypted in transit using TLS 1.3. Sensitive credentials (such as external billing API keys) are encrypted at rest using AES-256-GCM via AWS KMS envelope encryption. Tollgate data is segmented via strict multi-tenant isolation protocols at the database layer (DynamoDB and Aurora PostgreSQL).

You have the right to access, update, and request deletion of your data. Organization Owners may execute a complete data purge directly from the Settings dashboard, which triggers a hard cascading delete of all underlying records, telemetry, and API keys. You may also export your logs and telemetry via our CSV Data Export tools at any time.

If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us at:

• Privacy Inquiries: security@tollgateai.dev
• General Support: support@tollgateai.dev