Version 2.0 - 2026-10-25. Replaces version 1.0 of 2026-08-22 (kept in the archive).
SAGG is an API gateway for AI models. It is run by Oleg Dorofeev, operating as SAGG / PrivateDeskAI, British Columbia, Canada. This policy covers the SAGG API and this website. It applies when you use SAGG directly and when you reach it through an aggregator such as OpenRouter.
The service is for professional and business use by people who are 18 or older.
Contact for privacy questions and requests: support@privatedeskai.com
We do not store the text of your requests or of the answers. The text passes through the memory of our server while your request is being handled. We do not write it to our logs, databases or files.
We checked this by reading our code and by searching our logs for message text. We found none.
This is a statement about us only. It says nothing about the companies that process your requests (see section 5).
| What | Why | How long we keep it |
|---|---|---|
| Account data: your e-mail address, your API keys, the date each key was issued and its status, your prepaid balance | to run your account and check your keys | Until you ask us to delete it or the account is closed. A registration that is never confirmed by a payment is deleted after 48 hours (7 days if a payment was started). |
| Record of your acceptance of the Terms, the Privacy Policy and the Acceptable Use Policy: your client ID, the time, the version numbers of the documents, and whether you accepted at registration or at a top-up | to show that you accepted the texts that applied | As long as the account exists |
| Payment records: payment ID, amount, currency, time, status. For crypto payments also the public wallet address of the payer. | to credit your balance, to keep accounts as the law requires | These records are kept without a deletion date, because accounting and tax rules require us to keep them for years. |
| Card details | - | We never receive them. You type them into a payment form that Stripe provides on our page. |
| Technical service records: request ID, time, your client ID, the line and provider used, token counts, delay, status and error codes, and the short technical error text a provider returns | billing, abuse prevention, finding faults | About 8 days in our log archive. The live log is cleared when we update the service. |
| Web server records: for every request the time, the address requested, the status, the size and the browser name (User-Agent), without your IP address. For error events the web server also records the IP address. | finding faults, blocking abuse | Until a size limit is reached, which is usually between a week and several months. |
| Request-rate counters per client | rate limits | 24 hours |
| Short request trace (IDs, steps and outcomes, no text) | finding faults | Up to 6 hours |
| Daily page and sign-up counters | to see if the service is used. They are not linked to any person or IP address. | About 30 days |
| Usage counters for partner platforms | to check invoices | 90 days |
| Encrypted backups of the above | recovery after a failure | The last 14 copies, one every 6 hours: about 3 to 4 days. Deleted data can stay in a backup for that time. |
Cookies and browser storage. We do not set cookies. While you pay, our pages keep a temporary note in your browser tab (your e-mail address and a session token). It is removed after the payment and when the tab is closed. The payment form comes from Stripe, which may set its own cookies and collect device information under its own terms.
Our server and backups are in a data center in Nuremberg, Germany, run by Hetzner. Our payment and e-mail providers work in other countries. By using the service you accept that your data is processed outside Canada.
Independent brokers and hosts of the Gonka network. SAGG sends your requests to independent access brokers of the Gonka decentralized network. The brokers pass them to independent hosts that run the model. The hosts are anonymous and outside our control. We cannot promise that data is encrypted all the way to the host, that it is not stored, or that it is not used to train models. We give no zero-retention (ZDR) and no "no training" promise for this path. Our /models listing shows this as zdr: false.
Insurance provider (Standard line). The Standard line can use a provider outside the Gonka network as a backup. It works under its own published terms. We are not responsible for them.
Payments. Stripe processes card payments. We send Stripe your e-mail address so it can send you a receipt. Crypto payments (x402) are verified and settled on the Base network through an independent payment facilitator; the payer's wallet address and the amount are also visible on the public blockchain, and we cannot erase them there.
Hosting and e-mail. Hetzner hosts the servers. A separate service sends our e-mails (for example "balance credited" and key recovery).
We give you the names of the companies above on request.
Do not send medical or health data, payment card or bank account data, government ID numbers, other data covered by special regulation, or personal data of other people without a lawful basis to send it. We do not sign data processing agreements (DPA).
Write to support@privatedeskai.com. Within 30 days we will tell you, correct or delete what we hold about you: your e-mail address, balance, key records and service records linked to your client ID. We may ask you to prove that the account is yours.
We cannot take back what the Gonka network or another provider has already received and processed, and we cannot erase blockchain records.
Access to our servers is by SSH key only; password login is switched off. Backups are encrypted and the key to open them is not on the server. No system is perfectly safe. If a breach of our safeguards creates a real risk of significant harm to you, we will tell you, and we will report it to the authority where the law requires.
Each version has a number and a date. Old versions are in the archive. If we make a change that is not in your favour, we will e-mail registered customers at least 14 days before it starts.
support@privatedeskai.com (privacy requests and general questions), security@privatedeskai.com (security reports), abuse@privatedeskai.com (abuse reports).