tanveloPrivacy Policy
This Privacy Policy governs the manner in which Tanvelo ("Tanvelo", "we", "us", or "our"), operating via https://www.tanvelo.xyz, collects, uses, maintains, protects, and discloses information collected from users, developers, and organizations utilizing the Tanvelo LLM Federation Gateway, dashboard console, client SDKs, and authentication services (including Google OAuth).
Zero-Retention In-Flight
We never store, inspect, or log customer prompts or AI completion outputs by default.
Google API Compliance
Strict adherence to Google API Services User Data Policy, including Limited Use terms.
AES-256-GCM Encryption
Upstream API keys are encrypted at rest with authenticated ciphers. Keys are never logged.
User Control & Deletion
Instant self-serve account deletion, data purge, and Google OAuth permission revocation.
1. Application Identity & Service Overview
Tanvelo is an intelligent, high-availability developer infrastructure platform and LLM API Gateway. Tanvelo provides unified API routing, automatic failover, distributed rate limiting, and cost estimation across leading artificial intelligence providers (including OpenAI, Anthropic Claude, Google Gemini, Groq, DeepSeek, Mistral AI, Cohere, and local/on-premise endpoints).
This Privacy Policy applies to our website (https://www.tanvelo.xyz), web console, official client SDKs (such as @tanvelo/sdk and tanvelo.py), and API routing services (collectively, the "Service").
2. Information We Collect
We collect information in three ways: information you provide directly, information received when you authenticate via third-party identity providers (such as Google OAuth), and operational technical telemetry generated when you use our services.
A. Account & Identity Data
When you register for a Tanvelo account, we collect your name, email address, password hash (managed securely via our identity provider), and company or organization name.
B. Information Received from Google OAuth (Sign-In with Google)
If you choose to register or authenticate using your Google account via Google OAuth 2.0, we request permission to access basic profile and identity information under the standard openid, email, and profile scopes. We collect and process the following Google user data:
- Google Account Email Address: Used as your primary account identifier, to verify your identity, and to transmit essential transactional alerts.
- Full Name & Given Name: Used to personalize your account profile and display team collaborator information within project workspaces.
- Google Profile Picture / Avatar URL: Used solely to display your user profile picture in the dashboard navigation bar.
- Google Unique User Identifier (
sub): A unique token provided by Google to bind your Google credentials to your Tanvelo account across login sessions.
C. Upstream Provider Credentials & Project Configurations
To route requests to your chosen AI providers, you may provide your upstream API keys (e.g., Google Gemini API key, OpenAI key, Anthropic token). These keys are encrypted immediately using AES-256-GCM authenticated encryption and stored in our protected database.
D. In-Flight Inference Data & Zero Body Retention Guarantee
By default, Tanvelo operates with Zero Body Retention (LOG_PAYLOADS=false). When your application dispatches inference requests through POST /v1/chat/completions:
- Prompts, chat messages, system instructions, and LLM completion responses are processed exclusively in transient RAM memory and streamed directly back to your client.
- We do not store, inspect, copy, or retain prompt text or AI response text on persistent disks or in databases.
- Only high-level operational execution metadata is recorded: timestamp, request ID, target provider name, model identifier, token counts, latency in milliseconds, and HTTP status code.
E. Technical & Diagnostic Data
We automatically collect technical data necessary for network security and rate-limiting enforcement, including IP addresses, browser user-agent strings, operating system, and system error logs.
3. How We Use Your Information
We use the data we collect solely for the following legitimate business and operational purposes:
- Authentication & Account Provisioning: Authenticating your identity via direct credentials or Google OAuth, establishing and maintaining your project workspaces, and preventing unauthorized account takeover.
- Executing Gateway Services: Validating Tanvelo Bearer API keys, enforcing project rate limits and monthly budget caps, routing inference requests, and managing fallback circuit breakers.
- Transactional Notifications: Sending essential service notifications, including password resets, OAuth verification notices, security incident advisories, and usage quota warnings.
- Customer Support & Debugging: Investigating system errors, diagnosing gateway downtime, and responding to developer support tickets.
- Platform Security & Defense: Detecting and mitigating DDoS attacks, malicious bot traffic, Server-Side Request Forgery (SSRF) attempts, and abusive activity.
We never sell, rent, or lease your personal data or Google user data to any third party for marketing or advertising purposes.
4. Google API Services User Data Policy Compliance & Limited Use Disclosure
Tanvelo adheres strictly to the Google API Services User Data Policy regarding data accessed via Google OAuth.
Mandatory Limited Use Statement:
"Tanvelo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements."
Strict Restrictions on Google User Data:
- No Advertising or Marketing: Information received from Google APIs is never used, transferred, or disclosed for serving advertisements, including personalized, contextual, retargeted, or interest-based advertising.
- No AI/ML Model Training: Information received from Google APIs (including profile data and any associated account metadata) is never used to train, fine-tune, improve, or evaluate generalized machine learning (ML) or artificial intelligence (AI) models.
- No Sale of Google User Data: Tanvelo does not sell, rent, license, or monetize Google user data under any circumstance.
- Restricted Third-Party Transfers: We only transfer Google user data to third parties if strictly necessary to provide the service (such as our certified identity infrastructure subprocessor, Clerk), to comply with applicable laws, or as part of a merger or acquisition with prior notice.
- Human Access Restrictions: Tanvelo personnel and contractors do not view or read your Google user data unless: (1) you provide express, affirmative consent for troubleshooting or customer support, (2) it is strictly necessary to investigate security breaches or technical fraud, or (3) required by binding legal process.
5. Cryptographic Security & Data Protection
We employ enterprise-grade cryptographic controls to safeguard customer data and credentials:
- End-to-End Transport Security: All communications with the Tanvelo website, developer dashboard, and API endpoints require TLS 1.3 / HTTPS encryption. Unencrypted HTTP traffic is rejected.
- Authenticated Secret Encryption: Upstream provider API keys are encrypted at rest in PostgreSQL utilizing authenticated AES-256-GCM ciphers with unique initialization vectors (IV) and authentication tags. Decryption occurs only in volatile memory immediately prior to upstream dispatch.
- Irreversible API Key Hashing: Client gateway API keys (
tv_live_...) are never stored in plaintext. We store exclusively the one-way salted SHA-256 hash. Plaintext keys cannot be retrieved, even by internal database administrators. - Network Egress & SSRF Guardrails: Custom provider URLs and outbound webhooks strictly enforce application-level SSRF defenses, automatically blocking RFC1918 private subnets (
10.0.0.0/8,172.16.0.0/12,192.168.0.0/16), loopback interfaces (127.0.0.1), and cloud metadata endpoints (169.254.169.254).
6. Third-Party Subprocessors & Disclosures
To deliver our high-performance infrastructure, we partner with trusted, SOC-2 compliant subprocessors. Each subprocessor is bound by rigorous contractual data processing agreements (DPAs):
User identity management, OAuth session tokens, and multi-factor authentication infrastructure.
Enterprise cloud hosting for encrypted credential databases, rate-limit state, and telemetry.
Direct execution targets (OpenAI, Anthropic, Google Gemini, Groq, DeepSeek) governed by your respective enterprise agreements.
Encrypted transmission of transactional emails, account recovery links, and customer support communications.
7. Data Retention & User Control (Account Deletion & Revocation)
We retain personal data and project metadata only for as long as your account remains active or as required to fulfill legitimate contractual and legal obligations.
You may permanently delete your account at any time through the Account Settings page in your Tanvelo console, or by sending a written deletion request to support@tanvelo.xyz. Upon account deletion, all personal data, project metadata, encrypted provider API keys, and access logs associated with your account are permanently purged from active systems within 30 days.
You can disconnect Tanvelo and revoke its access to your Google account at any time by visiting your Google Security settings: https://myaccount.google.com/permissions. Once revoked, Tanvelo will immediately lose all ability to access your Google account information.
8. Privacy Rights under GDPR & CCPA / CPRA
Depending on your jurisdiction, you possess specific legal rights regarding your personal information:
European Economic Area (GDPR) & UK:
You have the right to access the personal data we hold about you, request rectification of inaccurate data, request erasure ("Right to be Forgotten"), restrict or object to our processing, and request data portability. Our legal basis for processing your data includes contractual necessity (to provide the service), legitimate interests (platform security and performance), and consent (for OAuth authorization).
California Residents (CCPA / CPRA):
Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, California residents have the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate personal data, and the right not to receive discriminatory treatment for exercising these rights.
We confirm that Tanvelo does not sell or share personal information (as those terms are defined under the CCPA/CPRA), including data obtained through Google APIs.
To exercise any of these privacy rights, contact our Data Protection Team at support@tanvelo.xyz. We respond to verified requests within thirty (30) days.
9. Children's Privacy (COPPA Compliance)
Our Service is strictly designed for developers, engineering teams, and enterprise businesses. Tanvelo does not knowingly solicit or collect personal information from individuals under the age of 13 (or under 16 in the European Union). If we become aware that an individual under the age of 13 has registered or provided personal information, we will immediately delete such data and terminate the account.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect operational modifications, legal mandates, or updates to third-party integration policies (such as Google API Services policies). When revisions occur, we will update the "Last Updated" date at the top of this page. For material updates affecting data handling practices, we will provide prominent notice via email or a dashboard banner prior to the change taking effect.
11. Contact Information & Data Protection Office
If you have any questions, concerns, or requests regarding this Privacy Policy, our Google OAuth data compliance, or our Zero-Retention architecture, please contact us:
Tanvelo Trust, Safety & Privacy Office
Application: Tanvelo LLM Federation Gateway
Website: https://www.tanvelo.xyz
Privacy Policy URL: https://www.tanvelo.xyz/privacy
Email: support@tanvelo.xyz
© 2026 Tanvelo LLM Federation Gateway. All rights reserved.