Translation draft. Human legal review is required.
Privacy policy (draft)
Information we may process
To provide accounts and services, we process registration email, profile, conversations, API key hashes and prefixes, usage, wallet and financial records, and technical authentication/security records. The operator must verify actual fields and purposes against production configuration.
Service provider
Configured third-party model providers may process AI requests. Providers and their data terms must be verified before launch. This draft makes no promises about their retention, training, or deletion practices.
Retention, access and deletion
Records may be retained for billing, abuse prevention and operations. Retention periods, deletion mechanisms, request channels, backup cleanup and exceptions require operator confirmation. This draft does not guarantee a particular deletion deadline or absolute deletion.
Security and contact channels
Authentication, access control and key hashing protect parts of the data, but absolute security is not guaranteed. Contact support atxaporia_ai@outlook.com Contact Xaporia. Personal-data request procedures, operator identity, purposes, legal bases, cross-border and third-party processing remain to be confirmed and professionally reviewed.
DeepSeek data transfers (implementation; provider policy pending verification)
The current DeepSeek Adapter sends the selected upstream model ID, conversation messages and supported parameters from the server to https://api.deepseek.com/chat/completions. Credentials stay on the server. Generated content and Token usage are received. This describes code behavior only; the operator must verify the provider's current retention, location, training and deletion policies and obtain legal review before launch.
Account and data deletion capabilities
The code supports deleting individual conversations and API keys, but no self-service deletion of an entire account and associated data was found. Conversation deletion does not delete financial, model request or retained audit records. The operator must confirm and implement deletion scope, evidence retention, request channels and exceptions before publishing a final policy.