Privacy Policy
Last Updated: March 24, 2026.
How we protect your data and maintain trust across the AI lifecycle.
1. Introduction
Welcome to Qorebit. We are committed to protecting your privacy and ensuring your trust when using our unified AI infrastructure. This Privacy Policy explains how Qorebit ("we," "us," or "our") collects, uses, and safeguards your information when you use our AI Gateway, Orchestration, and related services.
2. Our Role as an AI Gateway
Qorebit acts as a secure intermediary (gateway) between your applications and various Artificial Intelligence model providers (such as OpenAI, Anthropic, Google, and others). By using Qorebit, you acknowledge that your data is routed to these third-party providers. We do not control and are not responsible for how these third-party providers handle your data, although we select providers that meet high security standards.
3. Data Collection and Retention
How we handle your AI inputs and outputs.
By default, Qorebit follows a Zero Data Retention policy. We do not store the content of your prompts or AI completions unless you explicitly enable logging for your account or via specific API parameters.
We collect and retain request metadata for billing, security, and operational purposes: timestamps, API identifiers, model used, token counts, latency, and IP addresses for rate limiting.
We collect standard account information: name, email address, organization name, and billing details required to provide our services.
4. No ML Model Training
A core principle of Qorebit is that **we never use your data, prompts, or completions to train machine learning models.** Your proprietary information and intellectual property remain yours, and we ensure it is not leaked into the training sets of any models we support.
5. Data Security
We implement industry-leading security measures to protect your data:
- Encryption in transit via TLS 1.3 or higher.
- Encryption at rest using AES-256 for any stored metadata or optional logs.
- Secure API key management and role-based access controls (RBAC).
- Regular security audits and infrastructure monitoring.
- Infrastructure hosted in secure, ISO 27001-compliant data centers (e.g., AWS/GCP).
6. Your Rights and Control
We believe in full transparency and user control. You have the right to:
- Access and export your account data and optional logs.
- Request deletion of your account and all associated data.
- Configure your data retention settings on a per-request or account-wide basis.
- Withdraw consent for non-essential data processing at any time.
7. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please reach out to our privacy team: