Privacy Policy

1 · General

This policy explains how Shanghai Xinrui Industrial Co., Ltd. ("we") collects, uses, and protects personal information when you use the website, compute services, and AI API gateway. We collect only the minimum data necessary to operate the service, meter usage, issue invoices, and prevent abuse — nothing more.

2 · What We Collect

• Inquiry form information —— the name, email, company name, and requirement description you enter in "Send an Inquiry" on the website, used to reply to your inquiry.
• Account information —— the email address or username you register with, and the encrypted password. We do not store plaintext passwords.
• API request metadata —— timestamps, model names, token counts (input/output/cached/thinking), status codes, and the originating API key, used to produce billing and usage statistics.
• Payment and invoice records —— top-up order numbers, payment transaction numbers, amounts, invoice titles, and tax numbers, used for accounting, invoicing, and handling disputes.
• Support communication records —— messages you send through WeChat, email, or online support, used for follow-up replies.
• Basic site preferences —— theme and language choices, stored only locally in your browser.

3 · What We Do Not Collect

Your prompts and model responses are not logged or stored (other than transient in-memory processing needed to complete the request), and we do not build training sets from your traffic. We run no advertising trackers, and we never sell or rent personal data.

4 · How We Use It

• Replying to inquiries, verifying identity, and operating your account and keys.
• Metering usage, keeping an accurate balance, and issuing invoices for actual consumption.
• Detecting and blocking abuse, fraud, key leakage, and abnormal traffic.
• Communicating with you about service changes, incidents, or security events affecting your account.

5 · Data Sharing

To complete requests, prompts and responses are forwarded to upstream model vendors — that forwarding is itself part of the service. Beyond this, data is shared only in the following cases: payment service providers that process payments; infrastructure providers that host the service; and the authorities when compelled by law. Aggregated, non-identifying statistics may be used for internal capacity planning.

6 · Data Retention

• Request metadata — at most 180 days, after which it is deleted or aggregated.
• Account data — retained while the account exists; deleted after you request closure (except records we must keep for accounting or legal requirements).
• Payment and invoice records — retained until the period required for dispute resolution, tax, and legal obligations ends.

7 · Security

Traffic to the website, gateway, and console is encrypted end to end. API keys are stored in hashed form wherever possible and can be rotated or revoked at any time in the console. Access to production systems is restricted and protected by credentials. If we discover a security incident affecting your data, we will notify the affected accounts at the first opportunity.

8 · Your Rights

You may request a copy of your account data, correct inaccurate information, ask for deletion of your account and related data, or withdraw consent to non-essential processing. Please write to the email below; we normally reply within 15 business days.

9 · Minors

This service is intended for enterprises and adult developers, not for minors under 14 years of age. If we learn that we have collected a minor's information without guardian consent, we will delete it as soon as possible.

10 · Changes and Contact

Updates to this policy will be published on this page with a revised effective date. If you have questions about this policy, please contact: info@shinloo.com.