Privacy Policy

This Privacy Policy explains how M6L LLC ("M6L," "we," "us," or "our") collects, uses, retains, and discloses information when you visit getgated.ai, create a Gated account, or use the Gated screening service (collectively, the "Services").

1. Summary of Our Privacy Practices

• No Storage of Screened Prompts: When a customer application sends end-user text to Gated for security and abuse screening, that text is inspected transiently in memory and immediately discarded. We do not store raw prompts on disk, log them, or use them to train AI models.
• Minimal Operational Telemetry: We store only the aggregate metadata required to display your security dashboard, enforce rate limits, and manage your subscription quota (such as check timestamps, character counts, threat categories, and one-way salted hashes of visitor identifiers).
• No Sale of Personal Information: M6L LLC does not sell or rent customer information or end-user data to third parties or data brokers.

2. Information We Collect

A. Customer Account & Billing Information

When you register for a free trial or paid subscription on Gated, we collect:

• Your work email address and authentication provider identifier (when signing in via Google, Microsoft, GitHub, Apple, or verified email).
• The application URL or store domain you connect to Gated.
• Subscription tier, billing status, and payment transaction identifiers processed by our payment processor, Stripe, Inc. (M6L LLC never receives or stores your full payment card number).
• Support messages and attachments you submit through the Customer Service Desk.

B. Transient Screening Inputs vs. Stored Telemetry

When your application calls the Gated screening API:

• Transient Screening Data (Not Stored): The text input submitted for classification is held in memory only for the duration of the request (typically less than one millisecond) and is discarded immediately upon returning the response.
• Stored Check Metadata: For each check, we record the application ID, check ID, timestamp, input character count, estimated token count, screening verdict (allow, flag, or block), matched rule category, and a one-way cryptographic hash of the end-user identifier or IP address.

C. Website Usage, Cookies & Device Abuse Prevention

When you sign in to the Gated console or use the interactive sandbox on our website, we use essential HTTP-only session cookies to keep you signed in and a browser fingerprint hash coupled with your IP address to prevent automated abuse of our free interactive demo and trial registration endpoints. We do not use third-party behavioral advertising cookies.

3. How We Use Information

M6L LLC uses the information we collect to:

• Provide, operate, and maintain the Gated screening service and customer console.
• Verify account email addresses (including checking domain mail exchange records to prevent disposable or fraudulent signups) and enforce trial and subscription quotas.
• Attribute prevented AI token spend and display blocked threat categories in your dashboard.
• Process subscription payments, send transactional account notices, and respond to Service Desk support tickets.
• Protect the security and availability of our network and prevent abuse of our free trial and sandbox features.

4. How We Share Information

We share customer information only in the following limited circumstances:

• Infrastructure & Service Providers: With trusted third-party vendors who process data on our behalf under strict confidentiality obligations, specifically Cloudflare (edge network delivery), Stripe (payment processing), and Resend (transactional email delivery).
• Legal Compliance & Safety: When required by applicable law, subpoena, or court order, or when necessary to protect the rights, property, or safety of M6L LLC, our customers, or the public (note that because we never store raw customer prompts, we cannot produce historical prompt text in response to any request).
• Business Transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our business, subject to the commitments in this Privacy Policy.

5. Data Retention

• Screened Prompt Text: 0 seconds (evaluated in memory and discarded immediately).
• Check Telemetry & Dashboard Metrics: Retained for the duration of your active account so you can review historical interceptions and token savings, or deleted earlier upon your written request.
• Account & Billing Records: Retained while your account remains active and as required for tax, accounting, and audit compliance (typically up to 7 years for payment invoices).

6. Your Privacy Rights (GDPR, UK GDPR, and CCPA/CPRA)

Depending on your location, you may have the right to request access to, correction of, export of, or deletion of the personal information M6L LLC holds about your account. You may also object to or restrict certain processing. To exercise any of these rights, contact us at privacy@m6l.ai or submit a request through the in-console Service Desk. We respond to verified requests within 30 days.

7. Changes to This Privacy Policy & Contact Information

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and notify account holders via email or console notice.

Controller / Operator: M6L LLC
Privacy Inquiries: privacy@m6l.ai
Security Inquiries: security@m6l.ai