Privacy Policy

1. Information we collect

We collect the following categories of information to operate the Service:

• Account information: your email address, email verification records, account creation time and language preference.
• Payment information: top-up amounts, currency, order IDs, payment status and the transaction reference returned by the payment provider. Payments are processed by a third-party payment provider; we never collect or store full card numbers, CVV codes or other complete payment credentials.
• API usage data: for each request, the model ID, input and output token counts, timestamps, request ID, response status, latency, the API key prefix used and the originating IP address.
• Request content: prompts you submit through the API and the model output are forwarded to the corresponding upstream model provider to fulfil the request. We retain request content only briefly and only as needed for troubleshooting, abuse prevention and dispute handling. We do not use it to train models.
• Technical information: browser type, device information, cookies and access logs used to keep you signed in, remember your language and keep the Service secure.

2. How we use information

• To create and manage your account, API keys and prepaid credits;
• To route and complete your model requests and to meter and settle usage at the published prices;
• To process top-ups, issue receipts and handle refunds and payment disputes;
• To monitor the Service, troubleshoot issues and prevent fraud and abuse;
• To send you notices about your account, billing, security or changes to the Service;
• To comply with legal obligations.

3. How we share information

We do not sell your personal information. We share it only as follows:

• Upstream model providers: to fulfil your request, its content is transmitted to the provider of the model you selected (for example OpenAI, Anthropic, Google, DeepSeek or Alibaba Cloud). Those providers process data under their own terms and privacy policies.
• Payment providers: top-ups are completed through a third-party payment provider (for example Creem), which acts as the merchant of record and collects and processes your payment details directly.
• Infrastructure providers: hosting, database, email delivery and logging vendors process data only as necessary to provide those services to us.
• Legal requirements: where required by law, regulation, court order or government request, or where necessary to protect our rights or the rights of our users.

4. Data retention

• Account information and ledger records: retained while your account exists; after closure we keep transaction records for as long as accounting and tax rules require.
• API usage metadata (excluding request content): kept for billing reconciliation and usage statistics, normally for 12 months.
• Request content logs: normally deleted automatically within 30 days, unless retention is required for an ongoing dispute or security incident.

5. Security

We protect your information with transport encryption (HTTPS), encrypted storage of API keys, least-privilege access and operational audit logging. No transmission over the internet is completely secure, so keep your API keys confidential and revoke them from the console immediately if you suspect they were exposed.

6. Cookies

We only use cookies that are strictly necessary to maintain your sign-in session and remember your language preference. We do not use third-party advertising or cross-site tracking cookies. You may disable cookies in your browser, but you will then be unable to sign in to the console.

7. Your rights

You can view and update your account information and manage API keys in the console at any time. To access, correct, export or delete your personal information, or to close your account, email support@funcd.org. We respond within 3 business days. Please settle any remaining credits before requesting deletion.

8. International transfers

To complete model requests, request content may be transferred to and processed in the countries where the upstream model providers operate. We only work with providers that offer appropriate safeguards.

9. Children

The Service is intended for developers and businesses and is not directed to anyone under 18. If we learn that we have collected information from a minor without parental consent, we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the console or by email. Continued use of the Service after an update means you accept the revised policy.

11. Contact

Operator: FUNCD (Singapore)

Support: support@funcd.org