Privacy Policy

• Account information: your sign-up email, the username you set and your password (stored only as a hash, so we never see the original). If you sign in with Google, we receive the email, name and account ID of your Google account.
• Organization information: when you create or join an organization, its name, your name in it and the quota the admin sets for you.
• Call records: for each call, the time, model, usage (such as tokens or images), cost, duration, the API key and group used, the source IP address and client information (User-Agent).
• Billing records: changes to your balance, such as top-ups, redeem codes, referral rewards and charges.
• Security records: the time, IP address and device information of account actions such as sign-ins and profile changes; for failed calls, the error type and the error message returned by the provider.

For regular calls, we forward your request to the relevant model provider and return the result to you. We do not store the content of requests or responses, with two exceptions:

• Async or batch image jobs: we temporarily store a prompt summary and the generated images so you can check and download them once the job is done.
• Safety checks: to prevent abuse, we may run automated safety checks on request content, possibly using a third-party moderation service. For requests flagged as possible violations, we keep a short excerpt (with keys and other secrets removed) as the basis for handling them.

The website and console use no analytics or ad tracking tools. Cookies are only used to keep you signed in and for a temporary check during Google sign-in.

Preferences such as theme and table columns are stored in your browser. If you open the site through a referral link, the referral code is also kept in your browser and submitted when you sign up.

When human verification is enabled on pages such as sign-in and sign-up, it is provided by Cloudflare Turnstile, and Cloudflare processes some browser and device information under its own privacy policy.

• To provide the Service: verify your identity, forward calls, bill usage and show your usage;
• For support: handle your questions, refunds and invoice requests;
• For security: detect unusual sign-ins, account theft, fraud and abuse;
• To send notices: verification codes, password reset emails and service notices about your account;
• To comply with laws and regulatory requirements.

We do not use your information for advertising, and we do not sell your personal information.

• Model providers: the models you call are provided by third parties (such as OpenAI, Anthropic and Google, most of them located outside mainland China). Your request content is sent to the relevant provider, which processes it under its own policies.
• Infrastructure providers: the providers we use to run the Service, such as cloud servers, network acceleration and protection (such as Cloudflare) and email delivery, process information only as needed to provide their services.
• Google: if you choose to sign in with Google, Google handles that sign-in.
• Organization admins: if you join an organization, its admin can see your email, your name in the organization, your quota and how much of it you have used.
• Legal requirements: we may disclose information when required by law or by judicial or government authorities.

We keep account information for as long as your account exists, and call and billing records as needed for reconciliation, support and legal requirements. After you close your account, we delete or anonymize your personal information within a reasonable period, unless the law requires us to keep it.

We protect your information with encrypted connections (HTTPS), hashed passwords and access controls. No system is perfectly secure, so keep your password and API keys safe and act quickly if they leak.

If a personal information security incident occurs, we will notify you promptly as required by law and take steps to remedy it.

• Change your username and password in the console account settings;
• View your call and billing records in the console, and export your call records;
• Delete API keys you no longer use at any time;
• Contact us to close your account, or to ask about, correct or delete the personal information we hold about you.

The Service is intended for adults and businesses. People under 18 must not sign up for or use it. If we learn that we have collected information from a minor, we will delete it promptly.

We may update this policy. Updates are posted on this page with a new date, and we will notify you of material changes by email or in-site notice.

If you have any questions about this policy or want to exercise the rights above, email us at [email protected].