Privacy Policy

• Account data: email address, nickname, password (stored only as a salted hash), and account activity such as credit balance and transaction history.
• Payment data: orders and transaction identifiers. Card or wallet details are processed directly by PayPal, Stripe, WeChat Pay or Alipay; we never see or store your full card number.
• Usage data: API request logs (requested profile URLs, timestamps, result status) used for billing, abuse prevention and service improvement.
• Technical data: IP address, browser type and device information collected automatically for security and analytics.

Where the GDPR applies, we process your data on the basis of: performance of a contract (providing the Service), legitimate interests (security, fraud prevention, service improvement), compliance with legal obligations, and — for marketing communications — your consent, which you may withdraw at any time.

• To provide, bill and support the Service.
• To prevent fraud, abuse and security incidents.
• To send service notices and, with your consent, product updates.
• To comply with applicable laws and enforce our Terms.

We do not sell your personal data. We share data only with: payment processors (PayPal, Stripe, WeChat Pay, Alibaba Alipay) to complete transactions; cloud infrastructure providers that host our Service under data-processing agreements; and authorities where disclosure is required by law.

We retain account data for as long as your account is active. Usage and API logs are retained for up to 12 months for billing and security purposes, then deleted or anonymized. Payment records are retained as required by applicable tax and commercial law.

Your data may be processed on servers located outside your country. Where required, we use appropriate safeguards such as Standard Contractual Clauses for transfers of personal data.

To exercise these rights, contact daheige313@gmail.com. We respond within 30 days.

• Access, rectification and deletion of your personal data.
• Restriction of or objection to processing, and data portability.
• Withdrawal of consent at any time, without affecting prior lawful processing.
• Complaint to your local data protection authority (e.g. GDPR supervisory authority).

We apply industry-standard safeguards: encrypted transport (TLS), hashed password storage, least-privilege access controls and network isolation. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

We use strictly necessary cookies/local storage for authentication and language preference. We do not use third-party advertising trackers.

We may update this Policy from time to time and will post the updated version on this page with a new "Last updated" date. Material changes will be notified by email or in-service notice.

For privacy-related requests, contact our data protection contact at daheige313@gmail.com (see our Contact Us page).