Legal · v1.0 draft

Privacy Policy

How GLAB AI collects, uses, stores, and protects your information.

Effective: 14 June 2026 · GauriLabs FZ-LLC · Dubai, UAE

This document is a working draft. GLAB AI is in early access. The final, lawyer-reviewed version will be published before public launch. For current binding terms, write to ceo@gaurilabs.com.

1. Information we collect

When you sign up, we collect your email address, name, and your Google account profile picture if you sign in via Google.

When you use the workspace, we store the prompts you send, the responses you receive, the models you use, and metadata like timestamps and token counts. This is required to bill credits accurately and to show you your usage history.

We do not collect: your contacts, your browsing history outside GLAB AI, your location beyond inferred timezone, or any payment card details (NowPayments handles cryptocurrency payments).

2. How we use your information

Strictly to operate the service. Specifically: to route your prompts to the correct model provider, to deduct credits, to display your history, to send you transactional emails (sign-in links, top-up confirmations), and to detect abuse.

We do not train AI models on your data. We do not sell your data. We do not share your prompts with third parties except the model provider you've selected for that specific request.

3. Third-party processors

We use the following processors to deliver the service. Each is bound by their own privacy commitments. Your prompts are sent only to the model provider you select.

  • Google (Vertex AI / Gemini) — when you select a Gemini model
  • Groq — when you select a Llama model on Groq infrastructure
  • OpenAI / Anthropic / others — when you select their respective models
  • MongoDB Atlas (AWS Mumbai) — your account and usage data storage
  • Vercel — application hosting and edge routing
  • Resend — transactional email delivery
  • NowPayments — cryptocurrency payment processing for credit top-ups

4. Data retention

Account data is retained as long as your account is active. Usage logs older than 90 days are aggregated and anonymized. Deleted accounts have their personal data purged within 30 days.

5. Your rights

You can request a copy of your data, request deletion, or request correction at any time by emailing ceo@gaurilabs.com. We respond within 30 days. EU and UK residents have additional rights under GDPR; California residents have rights under CCPA.

6. Security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256 via MongoDB Atlas). API keys for model providers are stored server-side only and never exposed to the browser. Access to production systems is restricted to authorized personnel and logged.

7. Children's data

GLAB AI is not intended for users under 13 years old. If you become aware that a child has provided us personal data, contact ceo@gaurilabs.com and we will delete it.

8. Changes to this policy

We will notify registered users by email at least 14 days before any material change to this policy. The current version is always available at this URL.

Questions about this document? Email ceo@gaurilabs.com. We respond within 2 business days.