Privacy Policy

1. Information Collection

We collect the following types of information:

1.1 Account Information

• Email address (for login and notifications)
• Password (stored as bcrypt hash, we cannot view plaintext passwords)
• Registration time and IP address

1.2 Usage Data

• API Key information (stored as SHA-256 hash)
• API request logs (model, token count, cost, timestamp)
• Recharge order records (amount, time, payment status)
• Balance change records

1.3 Technical Information

• IP address
• Browser type and version
• Device information
• Access time and pages

2. Information Usage

We use the collected information for:

• Providing and maintaining services
• Processing recharges and billing
• Sending service notifications (recharge success, low balance, etc.)
• Detecting and preventing abuse
• Improving service quality
• Complying with legal and regulatory requirements

3. Information Sharing

We do not sell your personal information. We may share information with third parties in the following circumstances:

3.1 Service Providers

• Anthropic: Your API request content is sent to Anthropic or other upstream API providers for processing
• DodoPayments: Payment processing during recharge, we do not store payment card information
• Resend: Used for sending email notifications

3.2 Legal Requirements

We may be required to disclose user information when required by law or government authorities.

4. Data Security

We take the following measures to protect your data:

• Passwords stored using bcrypt hash (cost factor 12)
• API Keys stored using SHA-256 hash
• Upstream provider API Keys encrypted using AES-256
• All API communications enforced over HTTPS
• JWT Tokens stored in HttpOnly Cookies to prevent XSS attacks
• Regular database backups

While we take reasonable security measures, we cannot guarantee absolute security.

5. Data Retention

5.1 Account information: Retained during account lifetime

5.2 Usage records: Retained for at least 12 months for billing verification and auditing

5.3 Recharge orders: Retained permanently for financial records

5.4 After account deletion, we will delete or anonymize your personal information, except where required by law

6. Cookie Usage

We use cookies for:

• Maintaining login status (JWT Token)
• Remembering user preferences
• Analyzing website usage

You can disable cookies through your browser settings, but this may affect some functionality.

7. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy policies of these websites and recommend reviewing their privacy policies.

8. Children's Privacy

Our service is not intended for children under 18 years of age. If we discover that we have collected personal information from children, we will delete it immediately.

9. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your account and data (account deletion)
• Export your usage records
• Object to or restrict certain data processing

To exercise these rights, please contact us via email.

10. Privacy Policy Changes

We may update this privacy policy from time to time. After changes, we will notify you via email or website announcement. Continued use of the service indicates your acceptance of the updated privacy policy.

11. Contact Us

If you have any questions about this privacy policy, please contact:

Email: privacy@example.com