Privacy Policy

GateFrame Inc. · Effective May 16, 2026 · Last updated May 24, 2026

1. Who we are

GateFrame Inc. ("GateFrame," "we," "our") builds cryptographic evidence infrastructure for regulated AI decisions. We are based in Dubai International Financial Centre (DIFC), UAE. Contact: shankar@gateframe.io.

2. What data we collect

Website visitors: We collect standard server logs (IP address, browser, page visited, referrer) via Netlify. We do not use third-party analytics trackers.

Form submissions: When you submit a form (July 21 brief, reserve PDF), we collect your email address, name, and role. We use this only to send the requested resource and follow up on your inquiry. We do not sell this data.

API customers: DPR records you sign via the GateFrame API are stored on AWS RDS (PostgreSQL, us-east-1). Records contain only the data you submit via the API — no additional profiling. Records are not shared with third parties.

3. Sub-processors

We use the following sub-processors: Netlify Inc. (website hosting, form capture — US); Amazon Web Services Inc. (API hosting, database — US); PyPI / Python Software Foundation (SDK distribution). We do not use advertising technology sub-processors.

4. Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing shankar@gateframe.io. We will respond within 30 days.

5. Data retention

Form submissions: retained for 24 months or until you request deletion. API records: retained for the duration of your pilot or enterprise agreement, plus 90 days after termination unless you request earlier deletion.

6. Cookies

We do not use tracking cookies. Netlify may set a session cookie for form submission purposes.

7. International transfers

GateFrame operates from the DIFC. Data may be processed in the US (AWS us-east-1, Netlify). We rely on standard contractual clauses for any transfers from the EEA or UK.

8. Contact

Data protection enquiries: shankar@gateframe.io