Privacy Policy

1. Introduction

ZhuAPI ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and API services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Services.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

• Email address
• Account password (encrypted)
• Company name (optional)
• Contact preferences

2.2 Billing Information

For payment processing, we collect:

• Billing contact information
• Payment method details (processed securely by our payment providers)
• Transaction history

Note: We do not store complete credit card numbers. Payment information is handled by PCI-DSS compliant third-party processors.

2.3 API Usage Data

When you use our API services, we collect:

• API request metadata (timestamps, endpoints, model used)
• Token usage counts (input/output)
• Response status codes
• IP addresses (for security and rate limiting)
• Error logs

Important: We do NOT store the content of your API requests or responses. Your prompts and generated content are processed in real-time and are not retained on our servers.

2.4 Website Usage Data

We automatically collect:

• Device and browser information
• IP address and location (country/region level)
• Pages visited and time spent
• Referral sources
• Cookies and similar technologies

3. How We Use Your Information

We use your information for the following purposes:

• Service Provision: To provide, maintain, and improve our API services
• Billing: To process payments, send invoices, and manage your account
• Security: To detect and prevent fraud, abuse, and unauthorized access
• Analytics: To understand usage patterns and improve our Services
• Communication: To send service updates, security alerts, and support responses
• Legal Compliance: To comply with applicable laws and regulations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data in the following circumstances:

4.1 Service Providers

We work with third-party vendors who provide services on our behalf:

• Cloud hosting and infrastructure providers
• Payment processing services
• Analytics and monitoring tools
• Customer support platforms

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

4.2 Legal Requirements

We may disclose information if required by:

• Applicable laws, regulations, or legal processes
• Government requests or court orders
• Investigation of potential violations of our Terms
• Protection of our rights, property, or safety

4.3 Business Transfers

If ZhuAPI is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you of any such change in ownership.

5. Data Security

We implement industry-standard security measures:

• TLS 1.3 encryption for all data in transit
• Access controls and multi-factor authentication
• Regular security assessments and penetration testing
• Employee training on data protection
• Incident response procedures

While we strive to protect your data, no internet transmission is 100% secure. We cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of processing
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at: zhuzhengwei2026@outlook.com

We will respond to your request within 30 days.

7. Data Retention

We retain your data for as long as necessary to:

• Provide our Services
• Comply with legal obligations (e.g., tax records)
• Resolve disputes and enforce our agreements

Specific retention periods:

• Account data: Retained until account deletion + 30 days
• API logs: 30 days
• Billing records: 7 years (legal requirement)
• Support communications: 2 years

8. International Data Transfers

Your data may be processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Data processing agreements with all service providers

9. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected data from a child, please contact us immediately.

10. Cookies and Tracking

We use cookies and similar technologies to:

• Authenticate users and maintain sessions
• Remember preferences
• Analyze website usage
• Improve user experience

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website
• Sending an email to registered users
• Displaying a notice in the user dashboard

Continued use of our Services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: