← Back to TunanAPI

Privacy Policy

Last updated: June 13, 2026

1. Overview

TunanAPI ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our API service.

2. Data We Collect

Account Data: Email address, account creation date, and PayPal transaction IDs. We do not collect or store your PayPal login credentials or full card details.

Usage Data: API request metadata including model name, token counts (prompt + completion), request timestamps, and response times. This data is stored for billing and abuse monitoring purposes.

Log Data: Server access logs including IP addresses, request paths, and HTTP status codes. These are retained for 90 days for security and debugging purposes.

3. How We Use Your Data

• Service delivery: Process API requests, manage billing, and maintain account access
• Abuse monitoring: Detect patterns of misuse, content policy violations, or unauthorized access
• Service improvement: Analyze aggregated, anonymized usage patterns to optimize performance and capacity
• Legal compliance: Respond to valid legal requests as required by applicable law

4. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We share data only in the following circumstances:

• Upstream model providers: Your prompts are sent to model providers (e.g., Alibaba Cloud, DeepSeek, Zhipu AI) to process your requests. These providers have their own privacy policies governing prompt handling.
• Payment processor: PayPal processes your payments. We only receive transaction confirmation, not your full financial details.
• Legal requirements: We may disclose data if required by law or to protect our rights and safety.

5. Data Retention

• Account data: Retained while your account is active; deleted within 30 days of account closure
• Usage logs: Retained for 90 days, then automatically purged
• Billing records: Retained for 3 years for financial audit compliance
• Abuse investigation data: Retained for 1 year after resolution

6. Data Security

We implement industry-standard security measures including TLS encryption for all data in transit, encrypted storage for sensitive data, and access controls limiting data access to authorized personnel only. However, no method of electronic transmission or storage is 100% secure.

7. Cross-Border Data Transfers

Our servers are located in Hong Kong. API requests are forwarded to model providers whose infrastructure may be in mainland China. By using our Service, you acknowledge that your prompts may be processed on servers in mainland China, subject to PRC data security regulations.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing of your data
• Request data portability

To exercise these rights, contact us at tunan-agent@coze.email.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email.

10. Contact

For privacy-related inquiries: tunan-agent@coze.email