注册与账户管理涉及邮箱、显示名称、密码哈希、会话及密钥信息。付款核对涉及支付申请、付款邮箱、订单号、金额、币种、状态和履约记录。服务运行还会产生请求时间、模型、Token 用量、错误分类和必要的安全诊断记录。

您提交给 API 的输入和模型输出会为完成请求而传输。当前服务设计不将消息正文作为常规用量或故障日志保存；请仍避免提交不必要的敏感信息。

我们使用这些信息来创建和保护账户、验证邮箱、处理支付与退款、交付模型调用、计算用量和余额、防止滥用、排查故障并履行适用的法律义务。浏览器会话 Cookie 用于保持登录和保护账户操作。

我们使用自有的第一方产品分析记录统计匿名访客、页面访问、指定按钮点击及页面可见停留时长，以评估产品使用与转化。该记录使用随机浏览器标识，不包含 IP、User-Agent、邮箱、API 凭据或消息正文；登录状态存在时，服务端可能将事件关联到当前账户。

API 请求内容会发送给提供模型能力的上游服务；付款会经由 Infini 或 FastSpring 处理，验证邮件由 Resend 发送。我们还可能使用必要的托管和基础设施服务商。相关服务商可能在您所在地区以外处理数据；其自身的数据处理规则也可能适用。我们不出售个人信息。

CheapCoding 当前不使用第三方广告或跨站行为分析工具，也不授权服务商为其自身的定向广告目的跟踪您在无关第三方网站上的活动。由于我们当前不进行这种跨站跟踪，浏览器的“请勿跟踪”（Do Not Track）信号不会改变本服务的数据处理方式。若相关做法发生变化，我们会先更新本政策及适用的选择机制。

账户、订单和用量记录按提供服务、处理争议、审计、安全及法定义务所需的期间保存；过期会话和验证令牌按系统规则清理。具体保存时间取决于记录类别及适用法律要求。我们采取访问控制、密钥保护和必要的安全措施，但任何网络服务都无法保证绝对安全。

您可在账户中心查看或修改部分账户信息、撤销 API Key。您也可以通过网站公示的客服渠道请求访问、更正或删除个人信息，或提出其他适用法律赋予的请求；部分交易与安全记录可能需要依法继续保存。处理请求前我们可能核验您的身份。

若数据处理方式发生重要变化，我们会更新本页并在合理可行范围内提示。请查看页面所列更新日期。

Registration and account management involve your email, display name, password hash, sessions, and key information. Payment review involves payment requests, payer email, order ID, amount, currency, status, and fulfillment records. Operating the service also creates request timestamps, model and token usage, error categories, and necessary security diagnostics.

API inputs and model outputs are transmitted to complete your request. The current service design does not routinely store message bodies in usage or error logs. Please avoid sending unnecessary sensitive information.

We use this information to create and secure accounts, verify email, process payments and refunds, deliver model calls, calculate usage and balances, prevent abuse, diagnose failures, and meet applicable legal obligations. Browser session cookies keep you signed in and protect account actions.

We use our own first-party product analytics records to count anonymous visitors, page views, selected button clicks, and visible-page engagement time so we can evaluate product usage and conversion. These records use a random browser identifier and do not contain IP addresses, user agents, email addresses, API credentials, or message bodies. When you are signed in, the server may associate an event with the current account.

API content is sent to the upstream model service. Infini or FastSpring processes payments, and Resend sends verification emails. We may also use necessary hosting and infrastructure providers. These providers may process information outside your region, and their own data practices may apply. We do not sell personal information.

CheapCoding does not currently use third-party advertising or cross-site behavioral analytics tools, and we do not authorize service providers to track your activity across unrelated third-party sites for their own targeted advertising. Because we do not currently engage in that cross-site tracking, browser Do Not Track signals do not change how this service processes data. If these practices change, we will first update this policy and any applicable choice mechanisms.

We keep account, order, and usage records for the time needed to provide the service, resolve disputes, audit, maintain security, and meet legal obligations. Expired sessions and verification tokens are cleaned up under system rules. The exact period depends on the record type and applicable law. We use access controls, key protection, and other appropriate safeguards, but no network service can guarantee absolute security.

You can view or change some account details and revoke API keys in the account center. You may use the support channel published on the site to request access, correction, or deletion of personal information and exercise other rights available under applicable law. Some transaction and security records may need to be retained by law. We may verify your identity before acting.

We will update this page if our data practices change materially and provide notice where reasonably practicable. Check the revision date shown here.