Privacy Policy

1. Scope

This policy covers personal data processed when you visit latiaoapi.com, create an account, pay for credit, or call the API.

It does not cover the privacy practices of upstream model providers, which are governed by their own terms.

2. Data we collect

We collect account data (name, email, authentication identifiers), billing data (invoices, tax identifiers, payment method metadata from our processors), and technical data (IP-derived country, request metadata, device and browser information).

Prompt and completion content is processed to fulfil your request. It is not used to train models and is not written to application logs. Optional request-content retention, if enabled by you, is encrypted and time-limited.

• Account: email, display name, language, timezone, currency preference.
• Billing: plan, invoices, tax ID, payment status (never full card numbers).
• Usage metadata: model, token counts, latency, status codes, platform request ID.
• Support: messages you send to us and any attachments.

3. Legal bases (EEA/UK)

We rely on contract performance to provide the service and process payments, legitimate interests for security and abuse prevention, and consent for optional marketing email and non-essential cookies.

4. Sharing and subprocessors

We share data with payment processors, cloud infrastructure providers and model providers strictly as needed to deliver the service. Subprocessors are listed on the subprocessors page once published.

We do not sell personal data. We do not expose upstream providers, accounts or channels to end users.

5. Retention

Invoices and billing records are retained for the statutory period in the operating jurisdiction. Request metadata is retained for a limited window for billing and abuse investigation. Account data is deleted or anonymised after closure, subject to legal holds.

6. Your rights

Depending on your jurisdiction you may request access, correction, deletion, portability, or restriction of processing, and you may object to processing based on legitimate interests.

Requests can be made from the console data page or by email. We aim to respond within 30 days.

7. International transfers

Data may be processed outside your country. Where required, transfers rely on standard contractual clauses or an equivalent mechanism. [Counsel to confirm the transfer mechanism per data region.]

8. Contact

Privacy questions: [email protected] (placeholder). A data protection officer appointment and EU representative details are to be confirmed before launch.