Privacy Policy — MCLY Technology

Last updated September 2026

1. Scope

This policy describes how MCLY TECHNOLOGY INC handles personal data when you use mclytechnology.com and the MCLY gateway. It covers two distinct roles: data we control about your account, and data we process on your behalf when you send requests through the API.

2. Data we collect

• Account data. Name, email address, company, telephone number, country and a hashed password, supplied when you register or place an order.
• Order data. The plan ordered, quantity, amount, payment method chosen and any note you add to the order.
• Operational data. API request metadata — timestamp, model identifier, token counts, latency, status code and the key used. This is what makes metering and failover work.
• Support correspondence. Messages you send us through the contact form or by email, kept so we can answer them and keep a history of the issue.
• Technical data. IP address, user agent and session cookie for the storefront, used for security and to keep you signed in.

3. Prompt content

Requests routed through the gateway are forwarded to the upstream provider you selected and are not retained by MCLY TECHNOLOGY INC for model training or any secondary purpose. We store request metadata for metering and abuse prevention. If you enable request logging in your own account for debugging, that log belongs to you and is stored under your control.

4. How we use data

• to provide the service: routing, metering, quota enforcement and billing;
• to secure it: detecting key misuse, abuse and fraudulent orders;
• to support you: answering enquiries and diagnosing integration problems;
• to meet legal obligations, including tax and accounting records.

We do not sell personal data, and we do not share it with advertisers.

5. Sharing

We share data with upstream model providers only to the extent necessary to fulfil a request you made, and with infrastructure providers that host our systems under contract. Where we are legally compelled to disclose data, we do so only to the extent required and, where permitted, we notify the account holder.

6. Retention

Account and order records are retained for as long as your account is open and afterwards for the period required by tax and accounting law. Operational metadata is retained for up to 13 months for metering disputes and abuse investigation. Support correspondence is retained for three years.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to certain processing, and to lodge a complaint with a supervisory authority. Profile details can be edited at any time from your account page. For anything else, write to [email protected]; we respond within 30 days.

8. Cookies

The storefront uses a single session cookie, marked HttpOnly and SameSite=Lax, to keep you signed in and to protect forms against cross-site request forgery. We do not run advertising or third-party analytics cookies on this site.

9. Security

Traffic to the storefront and the API is encrypted in transit. Passwords are stored as one-way hashes. Administrative access is restricted and logged. No system is perfectly secure, so we operate on the assumption that credentials can leak: rotate keys regularly and scope them to the narrowest set of models your workload needs.

10. Contact

MCLY TECHNOLOGY INC
4770 Baseline Rd Suite 228, Boulder, CO 80303, USA
[email protected]