隐私政策
1. 适用范围与联系
本政策适用于 ai.wfpromax.xyz 的 API 网关及账户服务。运营者：JIAYE LIN。隐私及数据权利请求请联系 xinghuo@poviai.com。与本站关联但独立销售的商城或第三方网站适用其各自的数据政策。
2. 我们处理哪些数据
- 账户资料：注册邮箱、名称、密码验证信息、登录提供方标识和你主动填写的资料。
- 服务及安全记录：API Key 及其管理信息、请求时间、IP 地址、客户端信息、模型、请求状态、Token 或图像用量、计费及错误记录。
- 订单与支持资料：订单号、支付状态、金额、币种、订阅或额度信息，以及你提交的售后、投诉和开票资料。
- 请求内容：为完成模型调用，需要处理和转发你提交的提示词、文本、图片或其他输入及模型响应。排错、风控或内容审计功能启用时，可能保存相关片段、错误信息或审核记录；不要假设请求内容绝不留存。
3. 用途和必要性
数据用于创建和保护账户、认证 API 调用、路由到你选择的模型服务、提供响应、计量与结算、处理订单和退款、排查故障、防止滥用、处理投诉及履行适用的法定义务。登录状态、语言和主题等功能可能使用浏览器本地存储或必要 Cookie。我们依据提供服务所需、适用的法律义务、合理的安全利益以及法律要求时取得的同意处理数据。
4. 第三方及跨境处理
模型调用会将所需输入转发给相应上游模型/API 服务商；上游可能是第三方接入渠道，并非一定与模型原厂直接连接。其数据处理、日志保留和使用规则由实际服务商的条款决定。请不要提交无权披露的商业秘密、个人敏感资料或他人隐私。
托管、数据库、网络、安全、登录、邮件及支付服务商可在提供相应服务的必要范围内处理数据。支付资料按收银台列明的支付机构或销售主体的隐私政策处理；本站主要保留订单和交易状态等业务记录。数据可能在与你所在地不同的国家或地区传输和处理。收到合法请求或为调查欺诈、维护权利所必需时，可能依法披露有关资料。
5. 存储、安全和保留
业务记录保存在服务所用的服务器、数据库及必要备份中。采取与风险相适应的访问限制、认证和传输保护，但不保证任何系统绝无风险。账户、订单、用量、安全与审计数据的保留时间按服务需要、争议处理、反滥用和适用的法定要求确定；不再需要时删除或匿名化。依法需要保留的交易资料及尚在备份轮换中的记录，可能无法立即全部删除。请自行保存所需输出并定期检查和撤销不再使用的密钥。
6. 你的权利
你可以在账户中查看、修改可编辑资料、查询用量、管理密钥；也可以通过支持邮箱请求访问、更正、导出或删除个人资料，或在适用法律允许时提出限制处理、反对或撤回同意。为防止冒用，我们会进行合理身份核验，并说明无法满足请求的法定理由。删除账户可能导致访问终止，既有订单或法定保留义务不自动消失。你也可以向有管辖权的数据保护机构投诉。
7. 更新
更新会在本页标记日期；重要变化应通过站内或适当联系方式告知。
Privacy Policy
Scope and contact
This policy covers ai.wfpromax.xyz, operated by JIAYE LIN. Privacy requests: xinghuo@poviai.com. Related shops and third-party websites have their own policies.
Data and purposes
We process account email, name, password authentication information, login-provider identifiers and information you submit. Service records include API keys and management information, timestamps, IP/client information, models, request status, usage, charges and errors. We also process order references, payment status, amounts, currencies, allowances and information submitted for support, refunds, complaints or invoices.
Providing AI responses requires processing and forwarding prompts, text, images or other inputs and model responses. Enabled debugging, risk-control or moderation features may retain excerpts, errors or audit records; do not assume request content is never retained. Data supports account access, authentication, routing, responses, billing, delivery, security, support and legal obligations. Necessary cookies or local storage may keep login, language and theme settings. Applicable legal bases include service performance, legal obligations, legitimate security interests and consent where required.
Providers and international processing
Inputs needed for a request are sent to the applicable upstream model/API service. Upstreams may be third-party gateways rather than direct connections to model creators. Actual providers' terms determine their data handling, retention and use. Do not send secrets or sensitive personal data you are not entitled to disclose. Hosting, database, networking, security, authentication, email and payment vendors process necessary data for their functions. Checkout identifies payment providers or the legal seller and their privacy terms. We primarily keep order and transaction-status business records. Processing may occur in countries other than your own. Lawful disclosures may be made for legal obligations, fraud investigations or protection of rights.
Storage, retention and security
Records are stored in service servers, databases and necessary backups. We use risk-appropriate access controls, authentication and transport protections; no system is risk-free. Retention depends on service needs, dispute handling, abuse prevention and applicable legal duties. Data no longer needed is deleted or anonymized. Required transaction records and backup rotation may delay full deletion.
Your rights and changes
Manage editable profile data and keys in your account. Email us to request access, correction, export, deletion, restriction, objection or withdrawal of consent where applicable. We may verify identity and explain legal exceptions. Account deletion can end access and does not remove existing transaction or retention duties. You may complain to your competent data protection authority. Updates are dated here; material changes should be communicated appropriately.