Privacy Policy

Information We Collect

Account information such as the email you provide at registration; billing information such as top-up and usage records (payments are handled by third-party processors and we do not store your full payment-card details); usage data such as API request metadata (timestamp, model, token usage); and technical information such as IP address, browser type, and cookies.

How We Use Information

To provide and maintain the Service, process billing, prevent abuse and fraud, provide customer support, and comply with legal obligations. We do not sell your personal information.

Request Content and Third-Party Sharing

To fulfill your API requests, we forward request content to the relevant underlying model providers, whose processing is governed by their own privacy policies. We may also share data, only as necessary, with payment processors and cloud infrastructure providers. Except as required by law, we do not disclose your data to third parties for other purposes.

Server location: the XHuoAPI gateway runs on servers in Phoenix, Arizona, United States, behind Cloudflare. Request content is forwarded to the upstream service for the model you choose, and where it is processed depends on that model and its vendor — models from Chinese vendors, for example, may be processed in mainland China. If your data must stay in a particular region, choose models accordingly or email support@xhuoapi.ai before you start.

Data Retention

We retain your information only as long as necessary to fulfill the purposes above and to comply with legal obligations. You may request deletion of your account and related personal data, though records required for accounting and legal purposes may be retained for the necessary period.

Cookies

We use necessary cookies to maintain sign-in state and remember language preferences, and may use analytics cookies to understand site usage. You can manage or disable cookies in your browser settings, though some features may be affected.

Data Security

Data in transit is protected with TLS. In the console you can set a spending limit and expiry for each API key, and delete or regenerate keys at any time. We take reasonable technical and organizational measures to protect your data, but no method of internet transmission or storage can be guaranteed to be absolutely secure.

Your Rights

You have the right to access, correct, or delete your personal information, and to request export or restriction of processing. To exercise these rights, contact us using the details below.

Changes to This Policy

We may update this Privacy Policy from time to time; material changes will be posted on this page with an updated effective date.