Last updated: June 2026
We collect information necessary to operate accounts, authentication, recharge, plan purchase, API key management, and security checks, including email address, display name, session status, login time, security summaries of IP and User-Agent, plan tier, balance, orders, and usage metadata.
We use API request metadata for billing, quota deduction, rate limiting, troubleshooting, and security auditing, such as request time, model, status code, token counts, cache tokens, duration, and estimated cost. Except where necessary to complete request forwarding, troubleshooting, or compliance obligations, we do not intentionally store full prompts or completions.
We use account information to provide authentication, plan access, balance display, payment verification, recharge card redemption, announcements, risk control, customer support, and service improvement. We do not use your API content for model training.
We use cookies to maintain login sessions and may use browser local storage for theme, language, announcement read status, and similar preferences. Disabling these capabilities may make login or some interface features unavailable.
To provide the service, we may exchange necessary information with payment providers, OAuth login providers, SMS or email vendors, gateway nodes, and upstream model providers. We only transmit information needed for the relevant function and expect those services to apply reasonable data protection measures.
We protect data through access controls, least privilege, transport encryption, sensitive-field redaction, and hashed API key storage. No internet service can be guaranteed absolutely secure, and you are responsible for protecting your password and API keys.
The service is not offered to users in mainland China. Individuals or entities located in mainland China, accessing through mainland China networks, or subject to mainland China jurisdiction must not register for, access, or use the service.
For privacy-related questions, contact us at privacy [at] tokenav.ai.