Privacy Policy

Effective: July 29, 2026　|　Version 1.0

⚠️ Most important: do not transmit sensitive data This service works by forwarding your request content to upstream model providers. Your requests pass through our servers. Do not transmit identity documents, financial credentials, medical records, trade secrets, or other people's personal information through this service.

1. Information We Collect

Category	Details	Purpose
Account	Username, email, password hash	Identification, login, notifications
Transactions	Top-up records, credit balance, consumption	Billing, reconciliation, refunds
Usage logs	Timestamp, model used, token counts, status code, source IP	Billing, troubleshooting, security, legal retention obligations
Technical	IP address, User-Agent	Risk control, anomaly detection

About request content (prompts) We do not store your request or response bodies for retention purposes. Requests are processed in memory during forwarding; usage logs record only metadata. However, content is still transmitted to upstream providers, whose retention practices are governed by their own privacy policies and are outside our control.

2. Cross-Border Data Transfer

The core function of this service necessarily involves cross-border data flow:

Our servers are located outside mainland China;
Your request content is forwarded to upstream model providers, most of which are located in the United States or other jurisdictions;
This means your submitted content leaves mainland China and becomes subject to the laws of the recipient's jurisdiction;
We cannot control how upstream providers process data, their retention periods, or their obligations to cooperate with local law enforcement.

If your use case is subject to data localization requirements, do not use this service for such data.

3. How We Use and Share

We use or disclose your information only:

As necessary to provide the service: forwarding requests to your selected upstream provider;
For payment processing: transmitting necessary order details to payment providers (never request content);
As legally required: in response to lawful requests from authorities with jurisdiction;
For security: investigating abuse, fraud, or attacks.

We do not sell your personal information, nor use it for advertising or unrelated purposes.

4. Retention Periods

Account and transaction data: retained while the account is active; transaction records kept a further 3 years after closure for tax and legal requirements.
Usage logs: retained for no less than 6 months (currently 12 months) to satisfy legal retention requirements, then archived and purged.
Request content bodies: not retained (see Section 1).

5. Your Rights

You may at any time access your account data and usage records (self-service in the console), correct inaccurate information, delete or close your account, or withdraw consent by discontinuing use.

To exercise these rights, email admin@yapi.uk. We respond within 15 business days.

6. Security

All traffic is encrypted via HTTPS;
Passwords are stored as irreversible hashes — we cannot view your original password;
API keys are shown in full only at creation. Store them securely and reset immediately if compromised.

Please understand that no internet service can be absolutely secure. We apply reasonable safeguards but cannot provide absolute guarantees.

7. Minors

This service is intended for developers and not for individuals under 18. If you are under 18, use only with guardian consent and supervision.

8. Policy Updates

We may update this policy and will revise the effective date. Material changes to data use or cross-border arrangements will be announced on-site or by email.

9. Contact Us

Privacy questions, data rights requests, complaints: admin@yapi.uk | 458120418@qq.com | QQ: 458120418