Privacy Policy
Effective date: [effective date] · Data controller: [Company name]
1. Personal data we collect
| Category | Items | When |
|---|---|---|
| Account | Email address; password (stored only as an irreversible hash) | Sign-up |
| Google sign-in | Google account identifier and email address (we receive no other Google profile data and no access to your Google account) | Signing in with Google |
| Sign-in | Session identifier (hashed), browser information (User-Agent), sign-in time | Sign-in |
| Usage | Model called, token counts, amount charged, processing time | API use |
| Payments | Order number, amount, payment status, payment processor transaction ID (card numbers are handled by the processor; we never store them) | Top-up and refund |
| Sellers | API keys listed for sale (encrypted); payout bank name, account number and holder (encrypted) | Listing and withdrawal |
| Reports | Reporter's contact address and report text (the reported key is stored only as a hash, never in full) | Theft report |
What we do not store: the prompts Buyers send and the responses AI models return. Requests blocked by moderation are recorded by category only, without their content.
2. Purposes
- Identifying members, signing in, and account security (preventing unauthorized sign-in)
- Providing the Service, calculating charges, and processing top-ups, refunds and Earnings settlement
- Preventing key theft and fraudulent use, handling reports, and resolving disputes
- Meeting legal obligations
3. Retention
Personal data is destroyed without delay when a member deletes their account, except for the following, which are kept for the periods required by law:
- Records of contracts, withdrawals of offers, payments and supply of goods or services: 5 years (Act on the Consumer Protection in Electronic Commerce)
- Records of consumer complaints and dispute handling: 3 years (Act on the Consumer Protection in Electronic Commerce)
- Sign-in records: 3 months (Protection of Communications Secrets Act)
4. International transfers and processors
By the nature of the Service, a Buyer's request content is sent through a Seller's API key to the AI provider below for processing. If a request contains personal data, that data is transferred abroad.
| Recipient | Country | Items | Purpose |
|---|---|---|---|
| OpenAI, L.L.C. | United States | Request content sent by the Buyer | Generating AI responses (when its models are used) |
| Anthropic, PBC | United States | Request content sent by the Buyer | Generating AI responses (when its models are used) |
| Google LLC | United States | Request content sent by the Buyer | Generating AI responses (when its models are used) |
Processors: Google (sign-in with Google, United States), Toss Payments (payments, Korea), Stripe (payments, United States), Google Cloud (hosting and database, asia-northeast3 / Seoul). We will update this policy and notify members if processors change.
5. Destruction
Electronic files are deleted in a way that cannot be recovered. Data remaining in backups is deleted when the backup retention period ends.
6. Your rights
Members may at any time request access to, correction or deletion of, or suspension of processing of their personal data by writing to [contact email]; we act on requests without delay. You can also delete your account yourself from the dashboard's Account tab.
7. Security measures
- Passwords are hashed with scrypt; we never keep the original.
- API keys listed for sale and payout bank accounts are encrypted with AES-256-GCM.
- Members' API keys and sessions are stored only as hashes.
- All traffic is encrypted with HTTPS.
8. Cookies
We use a single session cookie (tt_session) to keep you signed in. We use no advertising or analytics cookies.
You can block cookies in your browser, but you will not be able to sign in to the dashboard.
9. Privacy officer
Name: [Representative] · Contact: [contact email] · Address: [Address]