ToAPIs
home

Privacy Policy

Last updated: February 26, 2026

1. Information We Collect

ToAPIs ("we", "us", or "our") may collect the following types of information when you use our services:

  • Account information: Your email address provided during registration.
  • Usage data: Service usage records such as API call logs, request volume, and token usage.
  • Device information: Technical information such as browser type, IP address, and operating system.
  • Payment information: Top-up records. We do not store full card numbers; payments are handled by third-party payment providers.

2. How We Use Information

We use the information we collect to:

  • Provide, maintain, and improve our services.
  • Process transactions and send related notifications.
  • Detect and prevent fraud and abuse.
  • Respond to your support requests.
  • Send service-related system notifications. We do not send marketing emails unless you explicitly subscribe.

3. Data Security

We use industry-standard safeguards to protect your data, including:

  • API keys are encrypted at rest using AES-256.
  • All data in transit is encrypted using TLS 1.3.
  • Cloudflare WAF protection helps prevent malicious access.
  • We do not store your AI conversation content.

4. Information Sharing

We do not sell your personal information to third parties. We share information only when:

  • It is necessary to provide the service, such as forwarding API requests to upstream AI providers.
  • Required by law or in response to a lawful request from a government authority.
  • Necessary to protect the legitimate rights and interests of users, the public, or ToAPIs.

5. Data Retention

We retain your account information until your account is deleted. API call logs are retained for 90 days by default and can be viewed and exported in the console. After account deletion, we delete your personal data within 30 days, except where retention is required by law.

6. Cookies

We use essential cookies to maintain your login session. We do not use tracking cookies or third-party advertising cookies.

7. Your Rights

You have the right to:

  • Access and export your personal data.
  • Correct inaccurate personal information.
  • Request deletion of your account and related data.
  • Withdraw consent for specific data processing activities.

To exercise these rights, please contact: [email protected]

8. Protection of Minors

Our services are intended for users aged 18 and over. We do not knowingly collect personal information from minors. If we discover that we have collected it in error, please contact us immediately so we can delete it.

9. Policy Updates

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the console. Your continued use of our services constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions, please contact: