Privacy policy
Gondola is built so that the most sensitive thing you send us, your prompts, is something we never keep. This page says exactly what we store, what we do not, and who else touches your data.
Last updated: July 22, 2026
What we never store
Prompts and completions are never written to disk. That includes your chat messages, system prompts, tool inputs and outputs, generated text, and the contents of images you send. We do not store this content, and we do not store hashes of it. Requests are processed in memory, forwarded to the model, and the content is gone once the response finishes.
The chat history and folders in the browser playground live entirely in your own browser (localStorage and IndexedDB). They are never uploaded to our servers, and clearing your browser storage deletes them permanently. Naturally, the messages you submit for inference are sent to our gateway and on to the model provider so they can be answered. They are processed, not stored.
What we store
Account data: the wallet address you sign in with. For lenders, an encrypted copy of the Venice API key you deposit and the payout address you set.
API keys: a one-way hash of each key (we cannot recover the key itself), its label, optional expiry and spend limits, and when it was last used.
Per request: the model, token counts, timestamps, latency, cost and settlement amounts and fee rates, and the model id used. On a failed request we also store a hash of the upstream error text and a structural fingerprint of the request shape (how many messages and their roles, which parameters were present), never the content itself.
Payments: on-chain deposit and payout transactions. These are public on the Base blockchain by their nature, independent of us.
Video generation: the model provider holds a finished clip for a short window until your client confirms it was delivered, then deletes it (roughly a day at most if your client never confirms). We store the job id, never the media.
Secrets we hold at rest (deposited Venice keys, and the private keys of the deposit addresses used to receive top-ups) are encrypted with AES-256-GCM.
Why we use it
We use the data above only to run the service: to authenticate you, meter and settle usage, pay lenders, keep the marketplace secure, and publish aggregate solvency figures at /transparency. We do not sell your data or use it for advertising.
Cookies
We use first-party cookies only: a session cookie to keep you signed in (gondola_wallet, up to 7 days), a short-lived login nonce, and a referral-attribution cookie (gondola_ref, up to 90 days). We do not intentionally use third-party analytics or advertising trackers.
Who else processes your data
Venice AI runs the inference, so it receives the content of your requests. Venice is built around a no-logging model; Gondola does not add logging on top.
Vercel hosts and fronts the application. Railway hosts the database. Privy handles wallet and email sign-in. A Base RPC provider relays on-chain reads and transactions.
Your browser loads fonts from Google Fonts, so it contacts Google when a page renders. The Base blockchain records deposits and payouts publicly.
Where it is processed
The providers above may process data in countries other than yours. Using the service means you accept that cross-border processing.
Retention, deletion, and your rights
We keep account and usage records for as long as needed to run the service and to keep our accounting and solvency reporting correct; there is no fixed deletion schedule. You can deactivate API keys at any time from /keys, and lenders can revoke a deposited key from /lend, after which its encrypted key material is deleted once the last in-flight request settles. To request access to, correction of, or deletion of your data where applicable, contact us and we will handle it directly after verifying you control the wallet in question.
Security
Secrets are encrypted at rest and access is limited to what the service needs to operate. No system is perfectly secure; if a breach affects your data, we will notify affected users and the relevant authorities where the law requires it.
Children
Gondola is not intended for anyone under 18, and we do not knowingly collect their data.
Changes
We may update this policy as the service evolves; the date at the top changes when we do.
Contact
support@gondola-ai.com