Privacy policy

Account information: the phone number, nickname and password hash you provide at sign-up (we never store plaintext passwords); invite codes and the invitation graph (optional).

Account and billing: credit balance, credit ledger, subscriptions, orders and payment outcomes. Payments run through Alipay — we keep only the order status and amount, never card or payment credentials.

Usage data: what you consume through the /v1 API (models, credits spent) drives billing and rate limits. Model API keys you bring are stored encrypted (AES-GCM) and used only to forward your requests.

Sessions: the session cookie and dsh_token written after sign-in, plus refresh tokens (hashed), which keep you signed in.

To provide accounts, sign-in, credits, subscriptions, orders and payments, and the OpenAI-compatible relay API (text / image / video / embedding / 3D).

To keep things safe: authentication, rate limiting, abuse prevention and incident investigation.

For compliance: records and dispute handling required by law.

The landing pages load no third-party analytics; we never sell or rent your personal data.

Payments: Alipay. Order payment and its asynchronous notifications are handled by Alipay, and order status only changes after the callback signature verifies.

Data storage: the database is hosted by a cloud provider in mainland China.

Model services: relayed requests go to the model provider (Volcengine Ark by default). When you configure your own API key, requests go straight to the provider you named.

We keep data only as long as providing the service requires. You can request correction or deletion of your personal data through the public channels on /contact, and we act on it under applicable law.

After you close your account, identifying data such as your phone number is deleted after the shortest retention period compliance allows; credit and order records are kept as billing evidence under financial-compliance rules.