Privacy Policy
Last Updated: December 17, 2025
Effective Date: December 17, 2025
1. Introduction
Welcome to GonkaGate (the "Platform"). This Privacy Policy, which includes a cookie policy, explains how the Platform collects, uses, discloses, and safeguards your information when you use the API service and dashboard.
This Privacy Policy describes:
- What information the Platform collects about you when you visit or interact with any component of the Platform
- How the Platform uses, shares, stores, and secures that information
- How you may access and control that information
GonkaGate is a technology platform that provides API access to the Gonka decentralized GPU network. The Platform is committed to protecting your privacy and being transparent about data practices.
Important: The Platform is not a regulated financial service, payment institution, or licensed entity in any jurisdiction. This Privacy Policy describes data practices as a technology service provider.
Please read this Privacy Policy carefully. By using the Platform, you agree to the collection and use of information in accordance with this policy. This Policy is connected to the Terms of Use document.
2. Information We Collect
2.1 Account Information
When you create an account, the Platform collects:
- Email address — Used for account identification, authentication, and service communications
- Password — Stored in hashed form using bcrypt (never stored in plain text)
- Registration date — For account management purposes
2.2 API and Usage Data
When you use the API, the Platform collects:
- API request metadata — Model name, token counts, request latency, and cost
- API keys — Stored in hashed form (shown to you only once upon creation)
- Balance and transaction history — Amounts, dates, and transaction types
- Error logs — For debugging and service improvement
2.3 What the Platform Does NOT Collect
The Platform does not collect sensitive data or special category data about you. This includes details about race, ethnic origin, politics, religion, trade union membership, genetics, biometrics, health, or sexual orientation.
The Platform explicitly does NOT collect or log:
- Request or response content — Your prompts and AI-generated responses are never logged or stored
- Message content — The actual text you send to or receive from AI models
- Full API keys in logs — Only hashed versions are stored
2.4 Technical Data
When you access the dashboard, the Platform may collect:
- Browser and device information — Browser type, operating system
- Session data — For maintaining your logged-in state (expires after 24 hours of inactivity)
2.5 Payment Information
- Transaction records — Amount, date, payment method, and status
- Cryptocurrency transaction data — Transaction hash, sender address (for verification), amount received
- The Platform does NOT store your wallet private keys — You maintain full control of your cryptocurrency wallets
- The Platform does NOT have access to your full transaction history — Only transactions made to designated payment addresses
3. How We Use Your Information
The Platform will only use Personal Information that applicable law allows, and in particular:
- To provide customer support and personalized features, and to protect the safety and security of the Platform
- To satisfy a legitimate interest which is not overridden by your fundamental rights or data protection interests
- When you consent to do so for a specific purpose
- When the Platform needs to comply with a legal or regulatory obligation
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide and maintain the Platform | Email, API key, balance | Contract performance |
| Process transactions and billing | Usage data, transaction history | Contract performance |
| Send service-related communications | Email address | Contract performance |
| Monitor and prevent abuse | Usage patterns, error logs | Legitimate interest |
| Improve the Platform | Aggregated, anonymized usage statistics | Legitimate interest |
| Respond to support requests | Email, account data | Contract performance |
| Administer and maintain safety and security | Technical data | Contract performance |
| Comply with legal obligations | As required by law | Legal obligation |
When you have given consent to use Personal Information for a specific purpose, you have the right to withdraw said consent at any time by contacting the Platform, but this will not affect any use of the Personal Information that has already taken place.
What the Platform Does NOT Do
- The Platform does NOT sell your personal data to third parties
- The Platform does NOT use your data for advertising or marketing purposes
- The Platform does NOT create user profiles for marketing
- The Platform does NOT train AI models on your data or prompts
- The Platform does NOT share Personal Information with any company for marketing purposes
4. Data Sharing and Third Parties
The Platform may share Personal Information with third parties that help operate, provide, support, improve, and market the Platform, for example, third-party service providers who provide website and application development, data storage and backup, infrastructure, payment processing, customer support, business analytics, and other relevant services.
4.1 Third-Party Service Providers
Third-party service providers have access to Personal Information only for the purpose of performing their services and in compliance with applicable laws and regulations. These providers are required to maintain confidentiality and security of all Personal Information that they process on the Platform's behalf and to implement and maintain reasonable security measures.
The Platform takes reasonable steps to confirm that all third-party service providers process Personal Information in a manner that provides at least the same level of protection as is provided under this Privacy Policy.
4.2 Gonka Network
When you make API requests, the Platform forwards request parameters (model name, token settings) to the Gonka decentralized GPU network for processing. Your identity or personal information is not shared with the network. The Gonka Network is decentralized, and the Platform does not control individual miners.
4.3 Payment Processors
Cryptocurrency Payments:
When you add funds via cryptocurrency, payments are processed by third-party payment processors. From these transactions, the Platform receives only:
- Transaction confirmation status
- Amount received in the designated cryptocurrency
- Transaction hash (for verification and support purposes)
- Sender wallet address (visible on public blockchain)
The Platform does NOT receive or store:
- Your wallet private keys
- Your full wallet transaction history
- Your identity from the blockchain (cryptocurrency transactions are pseudonymous)
4.4 Infrastructure Providers
Cloud hosting services are used to operate the Platform. These providers may have access to server logs but not to your personal data or API request content.
4.5 Legal Requirements
The Platform may share Personal Information with government and law enforcement officials to comply with applicable laws or regulations arising from any applicable jurisdiction.
4.6 Third-Party Software and Links
If you use any third-party software in connection with the Platform, those third-party software providers may gain access to Personal Information. Policies and procedures of third-party software providers are not controlled by the Platform, and this Privacy Policy shall not cover how Personal Information is collected or used by third-party software providers. You are encouraged to review the privacy policies of third-party software providers.
5. Data Security
The Platform implements appropriate technical and organizational measures to protect your data:
| Security Measure | Implementation |
|---|---|
| Encryption in transit | TLS 1.2 or higher for all communications |
| Password storage | Hashed using bcrypt with cost factor of 10 or higher |
| API key storage | Hashed using bcrypt or argon2 |
| API key entropy | Cryptographically random, 256+ bits |
| Session security | Tokens expire after 24 hours of inactivity |
| Brute-force protection | Login attempts limited to 5 per 15 minutes per IP |
| Content privacy | Request/response content is never logged |
6. Data Retention
The Platform only retains Personal Information for so long as it is reasonably necessary to fulfill the purposes it was collected for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data | Until account deletion | Service provision |
| Usage logs (metadata only) | 30 days | Billing reconciliation and debugging |
| Transaction history | 7 years | Legal and accounting requirements |
| Error logs | 30 days | Service improvement |
| Session tokens | 24 hours | Security |
7. Your Rights
You have the following rights regarding your personal data:
| Right | Description | How to Exercise |
|---|---|---|
| Be Informed | Be informed of what the Platform does with Personal Information | This Privacy Policy |
| Access | Request a copy of your personal data | Contact support |
| Rectification | Correct inaccurate personal data | Update in dashboard or contact support |
| Deletion | Request deletion of your account and data (except data held for record-keeping, to complete transactions, or to comply with legal obligations) | Contact support |
| Data Portability | Request to receive Personal Information in a structured, commonly used, and machine-readable format | Contact support |
| Restrict Processing | Object to or restrict the processing of Personal Information | Contact support |
| Withdraw Consent | Withdraw consent at any time (this will not affect the lawfulness of any processing carried out before such withdrawal) | Contact support |
To exercise any of these rights, please contact support@gonkagate.com. The Platform will respond to all legitimate requests within approximately one (1) month. Occasionally, it may take longer if the request is particularly complex.
As a security measure, specific information may be needed from you to help confirm your identity when processing any privacy requests.
Any request will normally be addressed free of charge. However, the Platform may charge a reasonable administration fee if the request is clearly unfounded, repetitive, or excessive.
8. Cookies and Tracking
The Platform may use "cookies" and other technologies to gather, store, and track certain information related to your access to and activities through the Platform.
A "cookie" is a small piece of information that the Platform assigns to your device while you are viewing or accessing the Platform. Cookies are beneficial and may be used for various purposes, including allowing you to navigate between pages efficiently, enabling automatic activation of certain features, remembering preferences, and making the interaction between you and the Platform quicker, easier, and smoother.
8.1 Types of Cookies Used
Strictly Necessary Cookies:
These cookies are essential to enable you to log in, navigate the Platform, and use its features. The Platform does not need to obtain your consent to use these cookies.
Functionality Cookies:
These cookies allow the Platform to remember choices you make (such as language or theme customizations) and provide enhanced, more personal features. The information these cookies collect remains anonymous, and they cannot track your browsing activity on other websites.
Performance Cookies:
These cookies collect information about how you use the Platform, for example, which pages you visit most often, and record difficulties you may experience. All information collected by these cookies is aggregated and therefore anonymous. It is only used to improve the efficiency of the Platform.
8.2 Cookie Summary
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session cookie | Maintain authentication state | 24 hours |
| Preference cookies | Remember your settings (theme, language) | 1 year |
8.3 Analytics
The Platform may use analytics tools to understand how users interact with the dashboard. Analytics may collect:
- Pages visited and time spent
- Browser and device information
- Approximate geographic location (country/city level)
8.4 Managing Cookies
You may remove cookies by following the instructions of your device preferences. However, if you choose to disable cookies, some features of the Platform may not operate properly, and your online experience may be limited.
8.5 What the Platform Does NOT Use
- The Platform does NOT use advertising or targeting cookies
- The Platform does NOT use third-party tracking pixels for advertising
- The Platform does NOT participate in ad networks
9. International Data Transfers
The Platform potentially collects Personal Information globally and transfers, processes, and stores Personal Information even outside your country of residence for the purpose of providing the Platform's services.
Some of the countries in which the Platform or third-party service providers are operating from or are located in may not have the privacy and data protection laws that are equivalent to those in your country of residence. When Personal Information is shared with these providers, use is made of contractual clauses, rules, and other appropriate mechanisms to safeguard the transfer of Personal Information, within reason.
Decentralized Network:
The Gonka Network is a decentralized, permissionless network with GPU miners located globally. The Platform does not control where individual miners are located. When you make API requests:
- Your request parameters (model name, settings) may be processed by miners in various jurisdictions
- Your actual prompt content passes through the network but is NOT stored by the Platform
- The Platform cannot guarantee which geographic region will process any given request
Blockchain Transactions:
Cryptocurrency payments are recorded on public blockchains, which are globally distributed and immutable. Transaction data (amounts, addresses, timestamps) is publicly visible and cannot be deleted.
The Platform implements reasonable safeguards for data it controls, but acknowledges that decentralized networks operate outside traditional data protection frameworks.
10. Children's Privacy
The Platform's products and services are not directed or intended for individuals not of legal age in their country of residence. The Platform does not knowingly collect any personal information from individuals under 18 years of age. If this is detected, steps will be taken to delete such information promptly.
If you believe information has been collected from a person under 18, please contact support@gonkagate.com immediately.
11. European Union Users — GDPR
If you are visiting or using the Platform from the European Union ("EU"), that may differ from privacy laws under other jurisdictions. You acknowledge that you may be transferring Personal Information to the Platform for storage and processing in other countries around the world for the purposes described under this Privacy Policy. The Platform takes the utmost care in protecting Personal Information and has put in place adequate mechanisms to protect it when it is transferred internationally.
11.1 Legal Bases for EU Users
The Legal Bases for collecting and using Personal Information if you are a citizen or resident of the EU will depend on the Personal Information concerned and the specific context in which it is collected:
Performance of a Contract:
The use of Personal Information may be necessary to perform the terms and conditions or other policies under which the Platform is operated.
Consent:
Your consent is needed if technical information such as cookie data is necessary, and Personal Information is used for certain purposes. You may withdraw your consent at any time by contacting the Platform.
Legitimate Interests:
The Platform may use Personal Information for its legitimate interests to improve the Platform, for security purposes, and fraud prevention, and to share information with any affiliates for internal administration. In such circumstances, the Platform ensures that these interests are not overridden by your data protection interests or fundamental rights and freedoms.
11.2 Legal Bases Table
| Processing Purpose | Type of Data Processed | Legal Basis |
|---|---|---|
| To enable you to access Platform services | Account Data, Transaction Data, Technical Data | Contract performance |
| To administer and maintain the safety and security of the Platform | Technical Data | Contract performance |
| To study the usage of services | Transaction Data, Technical Data, Usage Data | Legitimate interest to improve the Platform |
| To gather feedback on services or features | Account Data | Legitimate interest to improve the Platform |
11.3 Rights Under EU Law
If your Personal Information is subject to the protections offered by EU law, you may:
- Access, correct, update, or request deletion of Personal Information at any time by contacting the Platform (the Platform may charge a reasonable fee for any manifestly unfounded, excessive, or repetitive requests)
- Object to the processing of Personal Information, ask to restrict processing, or request portability of Personal Information
- Withdraw consent at any time if the Platform collected and processed Personal Information with consent
- Opt-out of any marketing communications
- Complain to a competent data protection authority about the Platform's collection and use of Personal Information
These rights apply only to users who are subject to EU law.
12. Changes to This Privacy Policy
The Platform reserves the right to amend this Privacy Policy from time to time by posting the updated Privacy Policy on the Platform. By continuing to use the Platform after the changes come into effect, you agree to be bound by the revised policy.
Changes will be indicated by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date
13. Contact
If you have any questions about this Privacy Policy or data practices:
- Email: support@gonkagate.com
GonkaGate — API Gateway to Decentralized AI Compute
