Data & Privacy Policy

Data we collect

• Account info: username, email, and the identifier of any third-party login you bind (such as Google).
• Top-up records: order number, amount, payment method, and transaction ID.
• Usage metering: model name, token usage, fees, latency, source IP, request ID, and other metadata required for billing and security.
• Security logs: sign-in, captcha, and password-reset activity used for risk control and troubleshooting.

Data we do not collect

We do not store your conversations: prompts and model responses are never written to our database, and usage records contain billing statistics only. Since conversations are not retained, they cannot leak from our side.

Upstream forwarding

To generate a response, your request content is forwarded in real time to the upstream model provider, which processes it under its own privacy policy. We keep no copy of the request content beyond that forwarding.

Retention

• Conversations: not stored, no retention period.
• Billing and order records: kept as long as needed for accounting and dispute handling.
• Security logs: cleared after a reasonable period.

Security measures

• Upstream provider credentials are stored encrypted with AES-GCM and can be rotated independently.
• Payment callbacks are signature-verified to prevent forged top-up notifications.
• API keys can be generated and deleted at any time in the console; deletion takes effect immediately.

Payments

Top-ups are processed by third-party payment providers; the methods shown on the top-up page reflect what is currently available. We never collect bank card numbers or payment credentials; only order numbers and transaction IDs are stored for reconciliation.

Usage restrictions

We do not use your request data to train models, and we do not sell or share your account information or usage data with third parties, except where required by law or with your explicit consent.

Your rights

You can review usage and top-up records or delete API keys at any time in the console. To export or delete your account data, contact us through the support channel published in the site notices.