Privacy / Effective September 1, 2026

A factual record of what Tollgate handles.

This notice covers the current private beta. It describes the product as it operates today, including the limits that still exist.

01 / Data provided

Account and billing setup.

Contact

We receive the email address used to create a meter and any name, email, or message submitted through Contact.

Billing identity

Customer IDs, display names, billing emails, pricing rules, optional Stripe customer IDs, and fixed billing records are stored for the meter owner.

Access

Full recovery codes and write keys are shown once. Tollgate stores hashes used to check them, not the original values.

02 / Model traffic

Content passes through but is not persisted.

Provider credentials, request bodies, prompts, messages, tool arguments, and response bodies pass through process memory only to complete the provider request. Tollgate does not write them to its product database. Usage metadata such as customer ID, provider, model, token counts, available cost, latency, and status is retained.

03 / Services

Infrastructure needed to operate the beta.

Hosting and data

Vercel hosts the web application and Convex stores product records. Provider requests are sent to the AI provider selected by the meter owner.

Stripe

If connected, Tollgate uses the supplied Stripe restricted key to create draft invoices. The key and webhook secret are encrypted before storage.

Observability

Vercel Web Analytics receives basic page traffic without model content. Amplitude and Sentry remain inactive until account keys are configured. Their code is restricted from collecting forms, request bodies, credentials, recovery codes, or model content.

04 / Purpose and control

Operate, secure, and improve Tollgate.

  • Provide private meters, usage attribution, pricing, billing runs, exports, and support.
  • Prevent duplicate requests, investigate failures, protect access, and maintain service reliability.
  • Understand anonymous page traffic and the completion of named product steps.
  • Tollgate does not sell personal information or use model content for advertising.
  • Dashboard access uses a required HTTP-only session cookie. Amplitude may use browser storage only if it is enabled later.

05 / Requests and limits

Contact us about your data.

Formal self-serve deletion and export workflows are not available in this private beta. Use the Contact page to request access, correction, or deletion. We will verify that the requester controls the relevant meter before changing its records. Tollgate is not intended for children.