Privacy Policy

1. We do not store your prompts or model responses

The prompt content you send through the API, and the response the model returns, are never written to our database. We do not retain them, analyse them, or use them for training. Once a request completes, that content no longer exists in our systems.

What we record for each call is metadata, used for billing and troubleshooting:

• Which model you called and which upstream channel served it
• Token counts (input, cached input, output, reasoning)
• Cost, duration, time to first token, HTTP status code, retry count
• The IP address the call came from, and the timestamp

None of these fields contains your prompt or the model’s output.

2. Your requests are forwarded to model providers

We are a relay, so your prompt content is necessarily sent to the provider of the model you call (DeepSeek, Moonshot AI, Zhipu AI and others), who process it and generate the response. These providers operate their servers in mainland China.

How they retain and use that content is governed by their own privacy policies, not this one. If you handle sensitive data, read the relevant provider’s policy first and decide whether sending it through this service is appropriate.

3. What we collect

Account information:

• Your email address (required to register)
• A hash of your password — we never store it in plain text and cannot read it
• If you sign in with Google: your email, display name and avatar URL
• Any profile details you choose to fill in

Transaction information: order numbers, amounts, payment method and status, and a ledger entry for every change to your balance.

Technical information: the IP address used at registration and sign-in, and the IP address of each API call.

4. How we use it

• To run the service: authentication, routing, metering, billing
• To produce your statements, so you can check every call individually
• For security: detecting abnormal usage, preventing fraud and abuse
• For necessary notices: verification codes, password resets, low-balance warnings, material changes

We do not sell your personal information, and we do not use it for third-party advertising.

5. Third parties

We rely on the following third parties, each of which sees part of your data:

• Model providers — they process your prompts, see section 2
• Google — only if you sign in with Google, to verify your identity
• Payment providers — they handle top-ups. Your card or wallet details go to them directly; we never see them
• Cloudflare — DNS and site protection, which processes access logs
• Our cloud provider — server and database hosting

6. Storage and retention

Account data is kept for as long as your account exists. Usage records and the balance ledger are kept long term — they are the basis of your statements and the only record that can settle a billing dispute.

API keys are stored as hashes; we cannot recover the plain text. That is why a key is shown only once, at creation.

7. Cookies and local storage

We use only what the service needs to function. No advertising or cross-site tracking cookies:

• Session token — kept in your browser’s localStorage to keep you signed in
• Language preference — a cookie remembering whether you chose English or Chinese

8. Your rights

• Access — your profile, ledger and usage records are all available in the console
• Correction — you can edit your profile yourself
• Deletion — email us to close your account. Profile data is deleted; completed transactions and usage records are retained as required for accounting and law
• Export — email us for a copy of your account data

To exercise any of these, email support@voyai.net.

9. Children

This service is intended for developers and not for anyone under 18. We do not knowingly collect information from children. If you believe we have, tell us and we will delete it.

10. Changes and contact

When this policy changes we update the effective date at the top of the page, and announce material changes separately.

For privacy questions or requests, contact support@voyai.net.