Privacy
Most people who use Gatewerk run it on their own servers. If that is you, this page barely applies: your data never reaches us.
LAST UPDATED 2 August 2026
What this covers
This policy covers two things: the website at gatewerk.com, and the hosted service at app.gatewerk.com.
If you run Gatewerk yourself, we are not involved in your data at all. The software ships with no analytics, no error reporting and no licence check. It does not call home. Your reviews, your reviewers and your audit records exist only on your infrastructure, and we have no way to see them.
Who is responsible
Gatewerk is operated by Idris Idriszade, an individual trading as a sole proprietor, based in Texas, United States. That person is the data controller for the website and the hosted service.
For anything on this page, including any request described below, write tohello@gatewerk.com. A person reads that address.
What the hosted service holds
If you create an account on app.gatewerk.com:
- Your account. Your email address and name, so you can sign in and so other reviewers can see who decided what. Signing in with Google or GitHub gives us those same two things and nothing else.
- Your content. The reviews your agents submit, what reviewers write in them, any attached files, and your templates. We store it so the product can show it back to you. We do not read it.
- Your record. Every decision writes a signed entry: who, what, when. That record is the product. It is built so it cannot be quietly altered later, which changes what deletion can mean. See below.
- Operational data. Sign in times, IP addresses on security events, and error reports, so we can keep the service running and notice abuse.
Where it is stored
In the European Union. The app, the database, and your sign in data all run on servers in Germany. That was a deliberate choice and we have no plans to move it.
One thing we would rather say than let you assume. Gatewerk is run by one person, who lives in the United States and administers those servers from there. Your data is stored in the EU, and it can be reached from the US for support and maintenance. That is an international transfer.
Who else is involved
Running the hosted service needs a handful of other companies. Each one only receives what its job requires, and none of them apply if you self host. We list what they do rather than who they are. If you need the current named list, write to hello@gatewerk.com and we will send it.
How long it is kept
You can delete your account from the app at any time, whichever way you signed in. When you do, your account, your reviews, your templates and your uploaded files are deleted within 30 days.
The audit record works differently, and it is the one place this needs care. Deleting entries from a signed chain would break the guarantee that makes the record worth having. So we anonymise them instead: your name and email are replaced, and what remains is that a decision happened, what it was, and when. It no longer identifies you.
What you can ask for
The same rights for everyone, rather than sorting people by country. You can ask for a copy of your data, ask us to correct it, ask us to delete it, or tell us to stop using it. Write to hello@gatewerk.com and we will answer within 30 days.
If you are in the EU or UK and think we have handled something badly, you can complain to your national data protection authority. We would rather you told us first.
What we do not do
- We do not sell your data, and there is no arrangement under which anyone pays us for access to it.
- We do not use your reviews to train models, ours or anybody else's.
- We do not advertise to you or share your data with advertisers.
- We do not track you across other websites.
Changes
If this policy changes in a way that matters, we will say so on this page and, for anything significant, email account holders. The date at the top always reflects the current version.