Privacy policy
This policy explains what data apimodelhub collects when you use the website and the API, why we collect it, how long we keep it, and what you can ask us to do with it. It forms part of the Terms of service.
1. What we collect
- Account data — email address, sign-in method (password or Google), sign-in times, account id, and the referral code you used or shared, if any.
- Billing data — top-up orders, amount, currency, payment method (bank transfer or card), the payment processor's transaction reference, and the ledger entries that make up your balance.
-
Request metadata — for each API call: the key used, model,
prompt/completion/cache token counts, cost, latency, and an error code if the call
failed. Each response carries an
x-request-idthat identifies this record. - Technical data — IP address and timestamps of API and console requests, kept to detect abuse, enforce rate limits and investigate incidents.
2. What we do not store
We do not store or log the content of your prompts or the models' responses. The gateway forwards the request body to the upstream provider and returns the answer without persisting either. Debug logs record the shape of a request (model, sizes, timing, error), never its text.
3. Why we process it
- To provide the service: authenticate your key, route the request, return the answer.
- To bill you correctly: metering tokens, keeping the balance and the ledger.
- To keep the service up and safe: abuse detection, rate limiting, incident response.
- To meet legal obligations: accounting, tax, and handling lawful requests.
4. Who else sees it
We do not sell your data and we do not use it for advertising. It is shared only with the parties needed to run the service:
- Upstream model providers — the request you send, including its content, is passed to the provider that serves that model. Their own privacy terms apply to what they do with it.
- Payment processors — Stripe (card) and SePay (bank transfer) handle the payment itself. Card numbers never reach our servers.
- Infrastructure providers — hosting and storage for the database and logs described above.
5. How long we keep it
Request metadata is kept while your account is active so you can read your own usage history, and is deleted with the account. Billing records are kept as long as accounting and tax law requires. Technical logs are kept for a short, rolling window sufficient for abuse and incident investigation.
6. Cookies
The console uses a session cookie to keep you signed in, and a cookie remembering your language and a referral code if you arrived through one. There is no advertising or third-party tracking cookie. Clearing them signs you out.
7. Security
Traffic is encrypted in transit. API keys are stored hashed, so a key is shown once at creation and cannot be read back in full. Access to production data is limited to what operating the service requires.
8. Your rights
Under Vietnam's Decree 13/2023/ND-CP on personal data protection you may ask us to show you the personal data we hold about you, correct it, delete it, or stop processing it. Ask from the email address registered on the account; we answer within 72 hours. Deleting your account deletes the data described above, except records we must keep for accounting and tax. If you are not satisfied with our answer you may complain to the competent authority.
9. Children
The service is not intended for, and may not be used by, anyone under 18.
10. Changes to this policy
When this policy changes in a way that affects you, we notify you by email at least 15 days before the change takes effect. The date at the top always shows the current version.
11. Contact
Contact support through the channel published on the home page.
apimodelhub is an independent service. Model names and trademarks mentioned here belong to their respective owners and are used only to describe the technical capabilities of the service.