ChinaAPI Start free — $2 credit

Legal

Privacy Policy.

Last updated: July 13, 2026

This Privacy Policy explains how ApexNodes (Hong Kong) Limited ("ApexNodes", "ChinaAPI", "we", "us"), operator of chinaapi.ai and dash.chinaapi.ai (the "Service"), collects, uses, and shares information when you use the Service. By using the Service you agree to this Policy and to our Terms of Service.

1. Information We Collect

Account information. Your email address, a securely hashed password (we never store passwords in plain text), and, if you sign in with Google, the identifier your provider returns. We do not receive your Google password.

Usage and billing metadata. For each request: the Model used, token counts or generated-media units, timestamps, request status, latency, your API Key identifier, and the resulting Credit charge. We use this to meter billing and to operate and secure the Service.

Technical and security data. IP address, user agent, and similar data used for authentication, rate limiting, fraud prevention, and abuse detection (including anti-bot verification).

Marketing attribution metadata. On chinaapi.ai, we may keep the first landing path, referring origin and path, permitted UTM campaign fields, a capture time, and a random session identifier in browser local storage. When you follow a registration link to dash.chinaapi.ai, that allowlisted metadata may be included in the registration URL so we can measure which pages and campaigns lead to registration. The attribution script does not intentionally collect form contents and does not define dedicated email or IP-address fields; allowlisted UTM values are treated as untrusted, length-limited marketing metadata. Page and referrer query strings are not forwarded wholesale (only the permitted UTM fields are extracted), and fragments are excluded. The ordinary web request still exposes network metadata to us and our infrastructure providers as described above.

Payment data. When you add Credits, payment is processed by our payment providers (for example, Stripe). We receive a transaction reference and status; we do not collect or store your full card number.

Communications. Messages you send us by email or messaging channels, for support and record-keeping.

2. API Input and Output

To fulfill a request, the content you submit ("Input") is transmitted to the relevant third-party Model provider and the provider returns "Output." We process Input transiently to route, meter, and deliver your request and to enforce these terms; we do not use the content of your Input or Output to train our own models. Upstream Model providers process your Input under their own terms and privacy practices; see Section 5.

3. How We Use Information

We use information to: provide, operate, and secure the Service; meter and bill usage; authenticate accounts and prevent fraud and abuse; measure which marketing pages and campaigns lead to registration and service use; improve the Service; provide support; comply with legal obligations; and send service-related notices (for example, verification codes, balance and payment notifications).

4. Legal Bases

Where applicable law requires a legal basis, we rely on: performance of our contract with you (providing the Service and billing), our legitimate interests (security, fraud prevention, and service improvement), your consent (where requested), and compliance with legal obligations.

5. Sharing and Sub-Processors

We do not sell your personal data. We share information only with:

6. International Transfers

The Service serves an international audience, and your Input is transmitted to upstream providers that may operate in mainland China or other jurisdictions. By using the Service you understand that your Input and related metadata may be processed outside your country of residence. Do not submit data through the Service that you are not permitted to transfer in this way.

7. Data Retention

The first-touch record remains in your browser until local storage is cleared by you, your browser, or a privacy setting. Attribution received by dash.chinaapi.ai may be retained with related account and service-improvement records for as long as your Account is active and as needed to provide the Service, resolve disputes, meet legal and accounting obligations, and enforce our agreements. You may request deletion of your Account and associated marketing attribution as described in Section 8; some records may be retained where required by law.

8. Your Rights

Subject to applicable law, you may request to access, correct, export, or delete your personal data, or object to or restrict certain processing. To exercise these rights, contact solution@chinaapi.ai from your registered email. We may need to verify your identity before acting on a request.

9. Data Security

We use technical and organizational measures appropriate to the risk, including encryption in transit, hashed credentials, access controls, and rate limiting. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

10. Cookies and Local Storage

We use strictly necessary cookies and browser local storage to keep you signed in, remember preferences (such as interface language), maintain a short-lived session identifier, and remember first-touch marketing attribution as described in Section 1. We use that attribution for our own aggregate funnel measurement, not to build or sell third-party advertising profiles.

11. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated through the Service.

13. Contact

Data controller and legal entity: ApexNodes (Hong Kong) Limited, operator of ChinaAPI.