Privacy Policy
Last updated: January 1, 2026 · Jurisdiction: Global · Server: Singapore
1. Data Controller
This platform is operated by a company registered in mainland China, with servers located in Singapore (Alibaba Cloud ap-southeast-1). For privacy inquiries, contact: privacy@yourdomain.com
2. Data We Collect
| Data Type | Purpose | Retention |
|---|---|---|
| Email address | Account registration and authentication | Duration of account |
| Password (bcrypt hash) | Account security | Duration of account |
| IP address | Language detection, security | 90 days |
| API request logs | Billing and usage statistics | 12 months |
| Payment records | Top-up orders (no card numbers stored) | 5 years (compliance) |
3. How We Use Data
- Providing API proxy service and usage billing
- Processing top-up orders and payment verification
- Account security and fraud prevention
- Sending service status notifications when necessary
- Never used for advertising or sold to third parties
4. Data Sharing
We share data only in these circumstances:
- Upstream API providers (Volcengine, etc.): forwarding API requests only
- Payment processors (NowPayments, Alipay): to complete transactions
- Legal requirements: complying with Singapore / Chinese court orders or regulations
5. Your Rights (GDPR)
EU/EEA users have the following rights under GDPR:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Delete your account and associated data (financial records retained as required by law)
- Portability: Receive your data in machine-readable format
- Restriction: Restrict processing in certain circumstances
To exercise these rights, email privacy@yourdomain.com. We will respond within 30 days.
6. Cookies
We use only functional cookies (language preference, login session). No tracking or advertising cookies are used. You can clear cookies at any time through your browser settings.
7. Security
- All traffic encrypted via HTTPS (TLS 1.2+)
- Passwords stored as bcrypt hashes — never in plain text
- API keys stored as SHA-256 hashes
- Database servers not exposed to the public internet
8. Account Deletion
You may request account deletion at any time by emailing privacy@yourdomain.com. Personal data will be deleted within 30 days (financial records retained as legally required).
9. Policy Changes
For material changes, we will notify registered users by email at least 7 days in advance. Continued use of the service constitutes acceptance of the updated policy.