Privacy Policy

Information We Collect

To provide the AI API gateway service, we collect the following categories of information:

• Account information: the username and password credentials you provide at sign-up (stored only in encrypted form).
• API keys: generated at creation; the server stores only a hash, and the plaintext is shown to you exactly once.
• Usage logs: per-request operational data such as model, token counts, cost, status and latency.
• Payment & payout records: recharges, balance changes, bonus earnings and withdrawals (payout account details are used solely to send funds).
• Contact details: any inquiries or feedback you choose to submit.

How We Use Information

We use the information above to: operate and maintain the API service; handle billing and quotas; monitor quality and troubleshoot failures; protect against abuse; and comply with legal obligations.

We never use your API request content to train models, and we never sell it to any third party.

API Keys & Security

The API Key plaintext is displayed only once at creation. The server stores an irreversible hash and cannot recover the plaintext from it.

A leaked key cannot be retrieved — keep it safe. If you suspect a leak, disable and recreate it in API Key Management immediately.

Logs, Usage Data & Model Improvement

Request logs (model, tokens, cost, status, latency) are used for billing and troubleshooting, and are pruned periodically per the platform retention policy.

To improve model quality, we retain a portion of conversation content (your prompts and the model replies) **after automatic redaction** for model training. Redaction covers emails, phone numbers, national IDs, bank cards and API keys, which are replaced with non-reversible placeholders.

You can turn this off anytime under "Profile → Help improve the models". Team owners can turn it off for the whole organisation under "Team settings → Training data". Once off, your conversations no longer enter the training data.

We do not sell your conversation content to third parties; training data carries no account identifier (replaced by an irreversible hash).

Cookies & Local Storage

We use browser local storage to remember your language, theme and session state. The site uses no third-party advertising trackers.

Third-Party Sharing

To fulfill API calls, your request content is forwarded to the upstream model provider you selected; we never share your account password or key plaintext with them.

Except where required by law or necessary to protect the platform, we do not sell or share your personal information with other third parties.

Data Transfer & Security

All traffic is encrypted in transit via TLS; upstream credentials are stored encrypted; access follows the principle of least privilege.

No transmission method is absolutely secure — please report any vulnerability you discover.

Retention & Deletion

After account deletion we remove or anonymize your account data within a reasonable period, unless the law requires otherwise.

Usage and billing data may be retained longer to satisfy financial and audit requirements.

Minors

The service targets businesses and adult developers. Users under 18 may not register for or use the service.

International Data Transfers

The service may be hosted on servers and upstream providers around the world, so your data may cross borders; we apply appropriate safeguards to protect it in transit.

Your Rights

You may access, correct or delete your account information and close your account — via the in-app features or by contacting us.

Policy Updates

This policy may be updated from time to time; material changes will be announced prominently on the site. Continued use means acceptance of the updated policy.

Contact Us

Questions about this policy? Reach us through the official contact channels provided by platform operations.