Introduction
Global AI (“we,” “us,” or the “Platform”) values your privacy and the protection of your personal information. This Privacy Policy (“Policy”) describes how we collect, use, store, share, and protect your personal information when you use the Platform’s artificial intelligence model aggregation API services (the “Service”), as well as the rights you have. This Policy applies to users worldwide. Unless otherwise required by applicable law, we will process personal information in compliance with applicable U.S. federal and state data protection laws, including but not limited to the California Consumer Privacy Act (CCPA) and its amendments (CPRA). If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, your personal information processing will also be subject to the General Data Protection Regulation (GDPR) and other applicable laws. If you are located in other jurisdictions, the rights granted by applicable law also apply to you. Please read this Policy carefully before using the Service. By registering or using the Service, you confirm that you have read and agree to this Policy.1. Who We Are / Data Processing Roles
1.1 Platform Role: The Platform acts as a technical middle layer. It does not train, own, or operate AI models itself; it merely forwards your API requests to third-party model providers (e.g., OpenAI, Anthropic (Claude), etc., each an “Upstream Provider”) and returns their Output to you unchanged. 1.2 Data Role Allocation:- With respect to the input data (“Input”) you submit through the Service, you act as a “Controller” and are responsible for the legality, necessity, and processing purposes of such content;
- We act as a technical service provider (service provider / processor, “Processor”) for your Input and process data only to the extent necessary to provide the Service;
- Upstream Providers act as independent data processors (or their own controllers) and process the data transmitted to them in accordance with their own privacy policies and terms of use. We recommend that you read the relevant Upstream Provider’s privacy policy before use.
2. Information We Collect
2.1 Information You Provide- Registration Information: When you register an account, we may collect your email address, username/nickname, contact details, etc.;
- Identity Verification Information: To meet identity verification or enterprise verification (KYB) requirements, we may collect your real name, ID/passport information, or business name, unified social credit code/registration number, legal representative, and authorized contact information, etc.;
- Billing and Payment Information: Account balance, recharge records, transaction history, invoice information, etc.;
- Content You Submit: Prompts, text, images, and other Input you submit through the API or other means when using the Service.
- Device and Technical Information: Device type, operating system, browser type, IP address, device identifiers, language preferences, etc.;
- Log Information: Request timestamps, endpoints accessed, request/response sizes, error codes, call frequency, etc.;
- Usage Information: Models invoked, token consumption, feature usage frequency, page views and interaction records, etc.;
- Cookies and Similar Technologies: Cookies, pixel tags, and other similar technologies used to maintain login state, ensure security, and improve experience (see Section 8).
3. How We Use Your Information
We use the information we collect only for the following purposes: 3.1 Providing the Service: Processing your API calls, performing protocol conversion, intelligent routing and failover, and returning Output generated by Upstream Providers to you. 3.2 Account and Security Management: Creating and maintaining your account, performing identity/enterprise verification, verifying identity, issuing and managing API Keys, and preventing fraud, abuse, and unauthorized access. 3.3 Billing and Settlement: Calculating charges based on your actual usage (e.g., token consumption, number of calls), processing recharges, generating invoices, and issuing receipts. 3.4 Customer Support: Responding to your inquiries, handling tickets, resolving issues, and troubleshooting. 3.5 Service Improvement: Analyzing service usage in de-identified or aggregated form to improve features, optimize stability and user experience, and ensure platform security. 3.6 Compliance and Legal Requirements: Complying with applicable laws, regulatory requirements, international sanctions and export control regulations, enforcing the Platform’s Terms of Service, and protecting the lawful rights of us, you, or third parties. 3.7 Notifications and Communication: Sending service-related notices (e.g., maintenance announcements, price changes, security alerts) and, where you have consented or applicable law permits, marketing communications. We do not use your Input to train our own AI models, nor do we sell your Input to third parties.4. Sharing and Disclosure of Information
4.1 Who May Access Your Data- Upstream Providers: To enable API forwarding, your Input is transmitted to the respective Upstream Provider you call and is subject to its privacy policy;
- Platform Operator and Affiliates: May access your information to the extent reasonably necessary to provide, maintain, secure, and comply with the Service;
- Service Providers: Third-party vendors that provide hosting, payment, customer support, analytics, and security monitoring services, processing your information only to the extent necessary and subject to confidentiality obligations;
- Business Transactions: In the event of a merger, acquisition, restructuring, or asset sale, your information may be transferred as part of the transaction, and we will notify you where required by law.
- Required by judicial, regulatory, or law enforcement authorities;
- Necessary to comply with applicable laws, regulations, legal process, or binding governmental requests;
- Necessary to enforce the Platform’s Terms of Service, prevent fraud, abuse, or security risks;
- Necessary to protect the rights, property, or personal safety of us, you, or third parties.
5. Legal Bases for Processing (Where GDPR Applies)
If the GDPR applies to you, the legal bases for processing your personal information include:- Performance of Contract: To provide the Service, process your calls, and manage billing;
- Legitimate Interests: To ensure platform security, prevent abuse and fraud, and improve the Service, provided our interests do not override your rights and freedoms;
- Legal Obligation: To comply with applicable laws, regulations, judicial, or administrative requirements;
- Your Consent: Where necessary (e.g., processing special categories of data or for marketing), we will process only after obtaining your consent, and you may withdraw your consent at any time.
6. Cross-Border Data Transfers
6.1 Input data you submit through the Service may be transmitted to Upstream Providers or service providers located in the United States or other jurisdictions, where the data protection level may differ from that of your location. 6.2 We will take reasonable measures to ensure the legality of data transfers in accordance with applicable law, including but not limited to appropriate safeguards such as Standard Contractual Clauses (SCCs) under the GDPR or other equivalent measures and applicable U.S. state requirements, and transmit only data necessary to provide the Service. 6.3 If you have questions about cross-border transfers, please contact us through the methods provided at the end of this Policy.7. Data Retention
7.1 We retain your personal information only for the period reasonably necessary to achieve the purposes described in this Policy, or as required by applicable law. 7.2 Your API call records and logs are generally retained for the period necessary to meet billing, security, and compliance purposes; after account cancellation, we will delete or anonymize your personal information to the extent permitted by applicable law, or continue to retain it as required by law. 7.3 If you stop using the Service or cancel your account, we will delete or anonymize your personal information unless retention is required by law or necessary for us to prevent fraud or security risks.8. Cookies and Similar Technologies
8.1 To maintain login state, ensure security, analyze usage, and improve the Service, we may use cookies, pixel tags, and other similar technologies. 8.2 You may manage or disable cookies through your browser or system settings. Please note that disabling certain cookies may affect your ability to use the Service (e.g., you may not stay logged in). 8.3 We may use third-party analytics tools, whose data collection and use are subject to the relevant third-party privacy policies.9. Data Security
9.1 We take reasonable technical, organizational, and administrative measures to protect your personal information, including but not limited to:- Transport encryption (TLS 1.2+) and encryption at rest;
- Access controls, least-privilege principles, and authentication;
- Security audit logs and anomaly monitoring;
- Regular security assessments and vulnerability management;
- Confidentiality and security commitments from employees and service providers.
10. Your Rights
10.1 Basic Rights Applicable to All Users:- Access: Request access to the personal information we hold about you;
- Correction: Request correction of inaccurate or incomplete personal information;
- Deletion: Request deletion of your personal information to the extent permitted by law;
- Withdraw Consent: Withdraw your consent at any time where processing is based on consent;
- Complaints: Lodge a complaint with the relevant data protection supervisory authority.
- Right to Know: Understand the categories and purposes of information we collect, use, and disclose;
- Right to Delete: Request deletion of your personal information;
- Right to Correct: Request correction of inaccurate information;
- Right to Opt Out of Sharing/Sale: Choose not to have your personal information “sold” or “shared” (where applicable);
- Right to Limit Sensitive Information Use: Limit processing of sensitive information within the applicable scope;
- Non-Discrimination: You will not be treated differently for exercising the above rights.
- Right of access, correction, and deletion;
- Right to restrict processing;
- Right to data portability: Receive your personal information in a structured, commonly used, machine-readable format and transmit it to another controller;
- Right to object: You have the right to object to processing based on legitimate interests;
- Right to withdraw consent.
11. Protection of Minors
11.1 The Service is intended for users with full legal capacity. Minors under 18 years of age should use the Service under the supervision and guidance of, and with the consent of, their guardian. 11.2 We do not knowingly collect personal information from children under 13 years of age (depending on applicable law, such as COPPA). If we learn that we have collected a minor’s information without guardian consent, we will delete it as soon as possible. 11.3 We specifically remind you to be cautious when uploading or publishing content involving minors; once published, you are deemed to have obtained the consent of the relevant rights holders and to permit us to process such information in accordance with applicable law.12. Policy Changes
12.1 We may revise this Policy from time to time as laws and regulations change or business needs develop and publish it on the Platform. For material changes, we will notify you separately via in-platform notification or email where required by applicable law. 12.2 Revisions take effect once published. Continued use of the Service after a change takes effect is deemed acceptance of the revised Policy; if you do not agree, you should immediately stop using the Service.13. Contact Us
If you have any questions, comments, or requests regarding this Policy or the processing of your personal information, please contact us through:- Contact Email: globalai@163.com
- Operator: Global AI
Effective Date: September 1, 2025