Informativa sulla privacy

While you use the services, we may collect the following information:

• Account information: such as email address, mobile number, sign-in identifiers, nickname, organization role, verification status and account preferences.
• Billing information: such as order numbers, top-up records, billing statements, invoicing information, payment status and information needed for risk checks.
• Usage information: such as request time, request IDs, API paths, model names, channel IDs, response status, latency, quota consumption, client information and device information.
• Content data: such as the prompts, text, images, audio, files, callback URLs and other business data you actively submit through the API or the console. To ensure call stability, accurate billing, security auditing and troubleshooting, such data may be temporarily stored, logged or de-identified to the extent necessary.
• Session and security information: such as cookies, sign-in sessions, access logs, records of unusual sign-ins, risk-control check information and records of permission changes.

We collect and use information mainly to:

• provide basic services such as registration and sign-in, API calls, the console, quota management, billing settlement and ticket support;
• perform identity verification, access control, abuse detection, fraud prevention, security auditing, request tracing and troubleshooting;
• carry out billing, reconciliation, invoicing, dispute handling, after-sales support and retention required for compliance;
• analyze model call quality, channel performance, cost structure and product usage to improve routing strategies and the product experience;
• respond to requests from judicial, regulatory or other competent authorities in accordance with laws and regulations.

We do not sell your personal information to unrelated third parties, except in the following situations:

• providing necessary information to entrusted service providers or partners to carry out functions such as model calls, payment settlement, cloud infrastructure, SMS and email notifications, and security auditing;
• sharing based on your explicit authorization, configuration or API instructions;
• disclosing information to fulfil legal obligations, respond to regulatory requirements, or protect the lawful rights and interests of the platform and related parties;
• carrying out necessary transfers of information, in compliance with the law, in the event of a merger, division, reorganization, asset transfer or similar situation.

When you call third-party models or external channels through the platform, part of the data in your requests may be transferred to the corresponding provider or its infrastructure for model inference, content moderation, file processing or returning results. Different providers may differ in their data processing rules, deployment regions, retention periods and compliance standards. You should choose models, channels and the scope of data that may be transferred carefully, based on your own business, customer agreements and regulatory requirements.

We keep information for the period necessary to achieve the purposes described in this Policy, unless laws and regulations or regulators require otherwise. For data needed for billing, auditing, security records, API tracing and dispute handling, we may extend the retention period based on legal obligations or reasonable business needs. After the retention period ends, we will delete or anonymize the information in accordance with the law.

We take reasonable security measures to protect information, such as access control, permission isolation, encryption in transit, log auditing, least-privilege authorization, and backup and recovery. However, the internet is never completely secure, and you still need to keep your account, password, API keys, webhook secrets and client environment configuration safe. If a key leak, account theft or unusual usage occurs or is suspected, please notify us promptly and take measures such as rotating or disabling the affected credentials.

To the extent permitted by applicable laws and regulations, you generally have the right to access, correct, supplement and delete your information, withdraw authorization, close your account, obtain a copy, and file complaints or reports. You can submit a request through the platform's settings page, the ticket system or official contact channels. For security, auditing and fraud-prevention reasons, some requests may require identity verification before they are handled, and in certain situations we may not be able to respond fully right away.

If you are a minor, please read this Policy together with your guardian and decide with them whether to use the services. We recommend that guardians guide and supervise minors' registration, top-ups, API calls and submission of information.

We may update this Privacy Policy in line with business changes, product upgrades or legal and regulatory requirements. The updated version will be published on the platform and will apply from its effective date. If an update materially affects your rights and obligations, we will make reasonable efforts to point it out prominently.

If you have questions about this Privacy Policy, our information processing rules or the exercise of your related rights, you can contact us through the customer service, ticket system, email or other official channels published by the platform.