Privacy policy

1. Information We Collect

• Account data: the email address you register with, and your password (stored only in irreversible hashed form).
• Service logs: API call timestamps, models invoked, token usage and response status — for metering.
• Access data: IP address and basic browser info, for security and abuse prevention.

2. How We Use Information

• Creating and managing your account and verifying identity;
• Billing, usage statistics and quota enforcement;
• Security, abuse detection and troubleshooting;
• Improving service performance and stability.

3. Information Sharing

We never sell your personal information. We share it only when:

• Your request content is forwarded to upstream model providers for processing — a necessary part of operating the service;
• Required by applicable law or lawful authorities;
• Necessary to protect the safety and legitimate rights of APIKIT, its users or the public.

4. Storage & Security

• All traffic is encrypted with TLS; sensitive credentials are stored encrypted or irreversibly hashed;
• Call logs are retained for a reasonable period for billing verification and dispute handling;
• Access follows the least-privilege principle with audit trails.

5. Cookies

We use strictly necessary cookies to keep you signed in and secure. Non-essential analytics cookies are used only with your consent.

6. Your Rights

You may review and correct your account information in the console at any time, or request export and deletion of your account and associated data. Data we must retain by law will be kept only for the statutory period after deletion.

7. Changes to This Policy

For material changes we will notify you via in-site announcement or email. Continued use of the service constitutes acceptance of the updated policy.

Effective date: October 23, 2026