AnixAPI API relay and quota management service (the “Platform,” “we,” or “us”) values privacy and personal-information protection. This Privacy Policy explains how we collect, use, store, protect, and otherwise process information when you visit, register, sign in, purchase, redeem, create API keys, call APIs, review usage, or use other services.
Please read this Policy before using the Platform. By accepting, registering, signing in, or continuing to use the Platform, you acknowledge that you understand and agree to this Policy. If you disagree, stop using the Platform.
1. Scope and Service Regions
This Policy applies to API relay, quota management, subscriptions, redemption codes, usage statistics, account administration, risk controls, image generation or editing, and related technical services.
The Platform does not serve users in mainland China and does not conduct promotion, sales, or operations there. You must not use the Platform if applicable law prohibits or restricts your use. Consequences of access through a proxy, VPN, overseas network, or remote server are your responsibility, except to the extent the Platform is liable under applicable law.
The Platform primarily serves overseas Chinese users, overseas developers, cross-border teams, and other overseas users who may lawfully use the service.
2. Information We May Collect
Depending on the feature used, we may collect account data such as username, email, password hash, avatar, role, group, registration time, account state, and invitation relationships; security and sign-in data such as IP address, time, device and browser details, User-Agent, session identifiers, failed sign-ins, 2FA state, and unusual access; transaction and quota data such as plans, subscriptions, redemption and recharge records, balances, changes, orders, required payment-provider data, and billing records; and API usage data such as key identifiers, time, model, path, consumed quota, status, errors, rate limits, concurrency, channel, and group data.
Where content-safety, request-audit, troubleshooting, or image-task features are enabled, we may process user input, necessary request bodies, uploaded images or files, generated results, redacted or truncated error payloads, and task state. Processing is limited by feature configuration and necessity.
We may also process tickets, support communications, feedback, appeals, compliance explanations, notes, uploads, cookies, and local storage needed for sessions, preferences, security, and user experience.
Do not submit unrelated sensitive data such as identity documents, bank passwords, biometric or health data, or information about minors.
3. How We Use Information
We use information to create, verify, maintain, and protect accounts; provide API relay, quota, codes, subscriptions, usage, billing, records, and image tasks; authenticate users and detect fraud, abuse, attacks, content-safety issues, and faults; process orders, payments, refunds, disputes, support, appeals, and notices; improve performance, product experience, stability, and capacity; meet legal, regulatory, audit, security, dispute, and rights-protection obligations; and for other reasonable purposes with your authorization or as permitted by law.
4. API Content and Logs
We may record necessary call metadata such as time, model, consumption, status, errors, user ID, API key identifier, channel, and duration for billing, statistics, troubleshooting, and risk control.
Where enabled, content-safety, request-audit, troubleshooting, or image-task functions may automatically process or retain user input, request bodies, uploaded images or files, generated results, and redacted or truncated errors. We do not routinely review complete business content manually except where you submit it, or where review is necessary for disputes, security audits, compliance, or specific troubleshooting.
Avoid submitting unlawful content, third-party personal data, trade secrets, production credentials, payment credentials, identity documents, or other sensitive information not appropriate for model services.
Upstream models, third-party APIs, payment providers, and client tools may process requests or transactions under their own policies. Review their privacy policies and terms as well.
5. Sharing and Processing Providers
We do not sell personal information. Where necessary, we may share information with or engage cloud, hosting, database, cache, logging, monitoring, security, email, messaging, payment, risk, and support providers; upstream model, API, payment, or network providers required to deliver the service; recipients required by law, courts, regulators, dispute resolution, rights protection, or security response; and recipients you authorize or request.
We use reasonable efforts to require processing only as necessary and with reasonable security safeguards.
6. International Processing
Servers, upstream providers, payment channels, hosting, support, or technical staff may be located in different countries or regions. By using the Platform, you understand that information may be transferred, stored, and processed outside your region. We use reasonable encryption, access control, least-privilege measures, and legally required transfer safeguards.
7. Storage and Retention
We retain information only as long as needed for the purposes in this Policy, unless law, regulation, disputes, accounting, security, risk control, or rights protection requires longer retention.
API content, uploads, image results, and debug records may use different configured retention periods and are limited to the period necessary for their purpose.
When information is no longer needed, we delete, anonymize, or otherwise reasonably dispose of it. Backup, logging, audit, or technical constraints may delay deletion from every copy, but continued ordinary use will be restricted.
8. Information Security
We use reasonable safeguards including encrypted transport, access controls, least privilege, role isolation, audit logging, monitoring, irreversible password hashing, and detection of abnormal sign-ins and calls.
No internet service can guarantee absolute security. We will provide reasonable assistance for incidents caused by users, third parties, force majeure, upstream failures, attacks, or other matters outside our control, but accept no responsibility beyond applicable law and this Policy.
9. Your Rights
Subject to applicable law, you may request access, correction, supplementation, deletion, export of certain records, withdrawal of non-essential authorization, feature closure, account cancellation, or review of a privacy question, complaint, or appeal.
We may verify your identity. Requests may be lawfully refused or delayed where they affect others, security, accounting, disputes, legal duties, or are technically infeasible, and we will explain the reason where required.
10. Minors
The Platform is not intended for minors. Do not register or use it if you have not reached the age of majority under applicable law or lack full legal capacity. If we discover improperly submitted information about a minor, we will verify and delete it or take other required action.
11. Cookies and Similar Technologies
We may use cookies, local storage, or similar technologies for sessions, language and theme preferences, security checks, duplicate-notice prevention, statistics, and performance. Browser settings can manage or delete cookies, but some features may stop working.
12. Policy Updates
We may update this Policy for legal, service, operational, third-party, or security changes. Updates take effect when published. Continued use constitutes acceptance; stop using the Platform if you disagree.
13. Contact Us
For questions, complaints, or requests about this Policy, personal information, account security, or compliance, contact us through the support, ticket, email, or other channel published by the Platform. We will respond within a reasonable period.