Privacy Policy
How GLAB AI collects, uses, stores, and protects your information.
Effective: 14 June 2026 · GauriLabs FZ-LLC · Dubai, UAE
1. Information we collect
When you sign up, we collect your email address, name, and your Google account profile picture if you sign in via Google.
When you use the workspace, we store the prompts you send, the responses you receive, the models you use, and metadata like timestamps and token counts. This is required to bill credits accurately and to show you your usage history.
We do not collect: your contacts, your browsing history outside GLAB AI, your location beyond inferred timezone, or any payment card details (NowPayments handles cryptocurrency payments).
2. How we use your information
Strictly to operate the service. Specifically: to route your prompts to the correct model provider, to deduct credits, to display your history, to send you transactional emails (sign-in links, top-up confirmations), and to detect abuse.
We do not train AI models on your data. We do not sell your data. We do not share your prompts with third parties except the model provider you've selected for that specific request.
3. Third-party processors
We use the following processors to deliver the service. Each is bound by their own privacy commitments. Your prompts are sent only to the model provider you select.
- Google (Vertex AI / Gemini) — when you select a Gemini model
- Groq — when you select a Llama model on Groq infrastructure
- OpenAI / Anthropic / others — when you select their respective models
- MongoDB Atlas (AWS Mumbai) — your account and usage data storage
- Vercel — application hosting and edge routing
- Resend — transactional email delivery
- NowPayments — cryptocurrency payment processing for credit top-ups
4. Data retention
Account data is retained as long as your account is active. Usage logs older than 90 days are aggregated and anonymized. Deleted accounts have their personal data purged within 30 days.
5. Your rights
You can request a copy of your data, request deletion, or request correction at any time by emailing ceo@gaurilabs.com. We respond within 30 days. EU and UK residents have additional rights under GDPR; California residents have rights under CCPA.
6. Security
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256 via MongoDB Atlas). API keys for model providers are stored server-side only and never exposed to the browser. Access to production systems is restricted to authorized personnel and logged.
7. Children's data
GLAB AI is not intended for users under 13 years old. If you become aware that a child has provided us personal data, contact ceo@gaurilabs.com and we will delete it.
8. Changes to this policy
We will notify registered users by email at least 14 days before any material change to this policy. The current version is always available at this URL.