Data handling
What Gateway stores, in plain words. Your prompts do pass through our servers on their way to your model provider; we do not keep them. The provider's own retention rules still apply to what they receive.
| Data | What we keep | How long |
|---|---|---|
| Gateway API keys | A SHA-256 hash, the first characters of the key, and the last four. The full key is shown once at creation. | Until you revoke the key |
| Prompts and responses | Not stored. A hash of the prompt is kept so repeated requests can be recognized. | Prompt text is never written |
| Request log | Time, model, provider, token counts, latency, status, decision, request ID. | Free 7 days, Starter 30 days, deleted within a day after that |
| Daily usage counts | Calls, blocked, errors and token counts per day, key and model. No content, no prompts. | Until you delete the organization |
| Detection findings | If you turn on sensitive-data or prompt-injection checks, each finding is recorded as a kind and a count (for example "payment card number x1"). The text that matched is never stored. In mask mode the provider receives placeholders instead of the data. | With the request log: free 7 days, Starter 30 |
| Provider keys you add | Checked with the provider, then encrypted at rest (AES-256-GCM). Never returned by the API or shown again, only the last four characters. Without one, calls use the shared key NEXORA configures. | Until you remove the key or delete the organization |
| Account and organization | Managed by NEXORA account. Gateway stores an organization ID, member roles and, when your account provides it, the email of each member. | Until the organization or the account is deleted |
| Billing records | Held by our payment provider (Stripe) as required for accounting. Gateway keeps only Stripe reference IDs. | As required by accounting law |
Your data, on request
Admins can download everything Gateway stores about the organization as JSON from Settings, and any member can download their own record. No support ticket needed.
Deleting your data
An owner can delete the organization from Settings. That removes keys, logs, usage counts and members, and cancels the subscription first. If your NEXORA account or organization is deleted, Gateway removes the matching data automatically.
Processors
This list will name every service that handles your data (hosting, database, payments, and your model provider) before general availability. It is a draft until then.