Privacy Policy

1. Information We Collect

We collect only the information necessary to provide the Service, in the following categories:

• Account information: your registration email, login credentials (passwords are stored using irreversible encryption), nickname and other details you choose to provide.
• Transaction information: top-up and subscription orders, order numbers and payment status returned by payment channels (WeChat Pay / Alipay), redemption code usage records and balance changes. We do not access or store your bank card or payment account passwords.
• Usage metadata: for each API call, the API Key used, model name, input / output token counts, cache hits, cost, time and HTTP status code. This is the basis for billing and console usage statistics.
• Technical information: request source IP, User-Agent, login times and device information, browser cookies and session identifiers. The "last used IP" of each API Key is shown in your console.
• Security logs: detection records of abnormal logins, Key leak risks, abuse or attacks.
• Support tickets and communications: text, screenshots and attachments you submit via console tickets or email.

2. Your Prompts, Completions and Generated Content

By default, we do not retain as long-term business records the full prompts, conversation content or code snippets you send to models, or the full outputs generated by models. To fulfil requests, troubleshoot failures, prevent abuse or comply with legal requirements, such content may be processed temporarily or cached briefly in the gateway, and is forwarded to the corresponding upstream model provider for processing.

Request and response content you paste into support tickets will be used for troubleshooting and dispute resolution.

The processing of content by upstream model providers (such as Anthropic, OpenAI and Google) is governed by their respective privacy policies.

3. How We Use Information

• Providing and maintaining the Service: account management, Key verification, request forwarding, and balance and quota deduction.
• Billing and reconciliation: creating orders, confirming payments, calculating the cost of each call and displaying usage details.
• Security and risk control: identifying Key leaks, abnormal concurrency, payment fraud and violations of the Terms of Service.
• Customer support: responding to tickets and handling refunds and disputes.
• Service improvement: analysing usage trends and model availability in aggregated, de-identified form, without involving specific content.
• Compliance with legal obligations: cooperating with regulatory requirements and retaining tax and accounting records.

4. How We Share Information

We do not sell your personal information. We share necessary information only in the following circumstances:

• Upstream model providers: to fulfil your requests, request content is forwarded to the provider of the corresponding model. We do not attach your account identity information when forwarding.
• Payment service providers: WeChat Pay, Alipay and similar, to process payments and refunds.
• Infrastructure providers: vendors of servers, databases, email delivery and similar services, limited to what is needed to provide the Service.
• Legal requirements: when required by laws, regulations, or judicial or administrative proceedings, or to protect the lawful rights and interests of the Service and other users.

5. Cookies and Similar Technologies

We use cookies and browser local storage to keep you signed in, remember your preferences (such as display settings) and cache public data such as exchange rates. You can clear or disable cookies in your browser, but this may prevent you from signing in or make some features unavailable. We do not use third-party advertising tracking cookies.

6. Data Retention

Account information is retained for as long as your account exists. Transaction records and usage metadata are retained for the period required by tax and accounting rules. Security logs are generally retained for no more than 180 days. After your account is deleted, we will delete or anonymise your personal information within a reasonable period, except where retention is required by law.

7. Data Security

We protect your information with measures such as encryption in transit (HTTPS), encrypted password storage and access controls. However, no transmission or storage over the internet can be made absolutely secure.

An API Key is equivalent to a credential for your account balance. Keep it safe and do not commit it to public code repositories or share it with others. If you suspect a leak, delete the Key in the console immediately and create a new one. You bear any usage resulting from a leaked Key.

8. Cross-Border Processing

The upstream model providers integrated with the Service are located outside mainland China, and your request content will be transmitted to their servers for processing. By using the Service, you consent to the cross-border transfers necessary to fulfil your requests. Your account and transaction information is stored on our servers and is not transferred to upstream providers as a result.

9. Your Rights

You can do the following directly in the console:

• View and edit your account profile and change your password.
• View all orders and usage details.
• Create, disable and delete API Keys.

To export your data, delete your account or exercise other rights granted by law, please sign in and contact support from the "Help & Support" page in the console. We may need to verify your identity before processing your request.

10. Third-Party Links and Services

The Service's documentation links to third-party tools such as Claude Code, Codex and CC Switch and their official websites. The privacy practices of these third parties are governed by their own policies and are not our responsibility.

11. Minors

The Service is intended for developers and teams with full civil capacity. We do not knowingly collect personal information from minors. If you become aware that a minor has used the Service without the consent of a guardian, please contact us.

12. Policy Updates

We may update this Policy from time to time and will indicate the new effective date at the top of this page. For significant changes to the scope of collection or manner of use, we will notify you via in-site announcement or email. Continued use of the Service after an update constitutes acceptance of the updated Policy.

13. Contact Us

Console: after signing in, contact support from the "Help & Support" page.

Our only official domain is keyvia.cc. Do not enter your account information on any other domain.