🔒 Privacy Policy

1. Information We Collect

• Account Information: Email address and password hash (stored using irreversible encryption).
• Usage Data: API call records including model used, token consumption, cost, and timestamps. We do not log or store the content of your API requests or responses.
• Technical Data: Source IP addresses (used solely for rate limiting and abuse detection).

2. What We Don't Collect

• Conversation Content: API request and response payloads are processed ephemerally and not persisted after the request completes.
• Payment Details: We do not directly handle credit card numbers or bank account information.
• PII Beyond Email: We do not require or collect names, physical addresses, phone numbers, or government IDs.

3. How We Use Your Data

Collected information is used exclusively for:

• Providing and maintaining the API inference service
• Calculating fees and managing account balances
• Enforcing rate limits and preventing abuse
• Service improvement, monitoring, and troubleshooting

4. Data Storage & Security

Account data is stored in encrypted databases on our self-owned servers. Passwords are hashed using bcrypt (irreversible). API keys are stored as SHA-256 hashes — the plaintext key is shown only once at creation time. We employ industry-standard security practices to protect your data. All infrastructure is managed by Yukun Technology (HK) Limited without third-party cloud dependencies.

5. Data Retention

Account data is retained for the lifetime of your account. API usage logs (token counts and fees only — no content) are retained for up to 90 days after account deletion for financial reconciliation. You may request earlier deletion of usage logs by contacting us.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties. We may disclose information only when required by law or to protect our legal rights.

7. International Data Transfers

Our servers are located in Hong Kong SAR. By using FlintAPI, you consent to the processing of your data in Hong Kong. We ensure appropriate safeguards for any cross-border data transfers in compliance with applicable data protection laws.

8. Cookies

FlintAPI uses essential session cookies to maintain login state. We do not use tracking cookies, analytics cookies, or third-party tracking services.

9. Your Rights

You have the right to: access, correct, or delete your account information; export your usage records; and close your account at any time. To exercise these rights, contact us at the address below.

10. Updates to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email. Continued use after updates constitutes acceptance.

11. Contact

For privacy-related inquiries, contact: support@flintapi.ai
Yukun Technology (HK) Limited
Hong Kong SAR