Privacy Policy

Last updated: August 1, 2026

This Privacy Policy explains how ApexNodes (Hong Kong) Limited ("ApexNodes", "ChinaAPI", "we", "us"), operator of chinaapi.ai and dash.chinaapi.ai (the "Service"), collects, uses, and shares information when you use the Service. By using the Service you agree to this Policy and to our Terms of Service.

1. Where the Service Is Offered

The Service is operated from Hong Kong SAR. As stated in our Terms of Service, it is not offered to, and is not directed at, residents of the European Economic Area, the United Kingdom, Switzerland, or mainland China. If you are resident in one of those territories, please do not use the Service.

Where you are in a market we do serve, we handle your personal data in accordance with the data-protection law of that market. See Section 9.

2. Information We Collect

Account information. Your email address, a securely hashed password (we never store passwords in plain text), and, if you sign in with a third-party identity provider such as Google, the identifier that provider returns. We do not receive your password from that provider.

Usage and billing metadata. For each request: the Model used, token counts or generated-media units, timestamps, request status, latency, your API Key identifier, and the resulting Credit charge. We use this to meter billing and to operate and secure the Service.

Technical and security data. IP address, user agent, and similar data used for authentication, rate limiting, fraud prevention, and abuse detection (including anti-bot verification). Some anti-abuse checks use a one-way cryptographic hash of your IP address rather than the address itself.

Payment data. When you add Credits, payment is processed by our payment providers. We receive a transaction reference, status, and the billing country reported by the payment provider; we do not collect or store your full card number. We use the billing country to understand which markets we serve and to apply the territorial rules in Section 1.

Communications. Messages you send us by email or messaging channels, for support and record-keeping.

3. How Your Requests Are Handled

ChinaAPI is a gateway, not a model developer. When you call the API, we authenticate the request, meter it against your Balance, and route it to the provider that operates the Model you selected. That provider generates the response, which returns to you through us.

Answering your request therefore means passing your Input to that provider. This is how the Service works, and it is the only routine disclosure of your content that we make.

Three commitments apply to that content:

• We do not train on it. Neither your Input nor the Output is used to train any model of ours.
• We do not sell it. We do not share it with anyone other than the provider fulfilling your request.
• We do not keep it. Input and Output are processed in transit to deliver your response; they are not retained as part of normal operation. See Section 7.

Once your Input reaches a Model provider, that provider processes it under its own terms and privacy practices — see Section 5.

4. How We Use Information

We use information to: provide, operate, and secure the Service; meter and bill usage; authenticate accounts and prevent fraud and abuse; provide support; comply with legal and accounting obligations; and send service-related notices (for example, verification codes, balance and payment notifications).

5. Sharing and Sub-Processors

We do not sell your personal data. We share information only with:

• Model providers — the operator of whichever Model you call, so that your request can be answered. Many of the Models we offer are developed and hosted in mainland China; others are hosted elsewhere. Depending on the Model, we connect either directly to the developer or through an aggregating supplier. Each processes your Input under its own terms.
• Payment providers and payment aggregators — to process top-ups and, where applicable, to act as merchant of record.
• Infrastructure providers — such as Cloudflare (content delivery and security) and our transactional email provider (Brevo) for verification and notification emails.
• Legal and safety — where required by law, to enforce our Terms, or to protect the rights, safety, and security of ChinaAPI, our users, or the public.

6. International Transfers

The Service is international by design: from wherever you are, you can reach Models hosted in a number of countries, including mainland China. Your Input and the related usage metadata are therefore processed outside your country of residence.

Because you choose what to send, please make sure you have the right to send it. If you handle personal data belonging to other people, regulated health or financial records, or material subject to export control, confirm that transferring it this way is permitted before you submit it.

7. Data Retention

Account data is retained while your Account is open.

Usage and billing records — the metadata described in Section 2, not the content of your Input or Output — are retained for as long as needed to bill you accurately, to answer disputes about charges, and to meet accounting obligations. Because these records are the evidence behind every charge, we retain them by default rather than deleting them on a fixed schedule.

Request content is not stored as part of normal operation; it is processed transiently to fulfill your request. Where a request is retained temporarily for debugging or abuse investigation, it is deleted when that purpose ends.

You may request deletion of your Account and associated personal data as described in Section 8. Some records may be retained where law, tax, or accounting rules require it, or where they are needed to resolve an open dispute.

8. Your Rights

Subject to applicable law, you may request to access, correct, export, or delete your personal data, or object to or restrict certain processing. You may also withdraw consent where processing is based on consent.

To exercise these rights, contact [email protected] from your registered email address. We may need to verify your identity before acting on a request. We aim to respond within 30 days, or sooner where the law of your market requires it.

If you are not satisfied with our response, you may complain to the data-protection authority in your market.

9. Data-Protection Laws That May Apply to You

The Service is operated from Hong Kong SAR and is subject to the Personal Data (Privacy) Ordinance (PDPO). Depending on where you are, other laws may also give you rights, including:

• Brazil — Lei Geral de Proteção de Dados (LGPD)
• South Korea — Personal Information Protection Act (PIPA)
• Thailand — Personal Data Protection Act (PDPA)
• Indonesia — Personal Data Protection Law (UU 27/2022)
• Vietnam — Decree 13/2023 on Personal Data Protection
• Mexico — Ley Federal de Protección de Datos Personales en Posesión de los Particulares
• Japan — Act on the Protection of Personal Information (APPI)

Where one of these laws applies, we handle your personal data in accordance with it, and the rights in Section 8 are available to you to the extent that law provides them.

10. Legal Bases

Where applicable law requires a legal basis for processing, we rely on: performance of our contract with you (providing the Service and billing), our legitimate interests (security, fraud prevention, and service improvement), your consent (where requested), and compliance with legal obligations.

11. Data Security

We use technical and organizational measures appropriate to the risk, including encryption in transit, hashed credentials, access controls, and rate limiting. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

12. Cookies and Local Storage

We use strictly necessary cookies and browser local storage to keep you signed in and to remember preferences (such as interface language). We do not use them to build advertising profiles.

13. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated through the Service.

15. Contact

• Email: [email protected]
• Telegram: https://t.me/chinaapiai
• WhatsApp: https://wa.me/15039870317

Legal entity: ApexNodes (Hong Kong) Limited, operator of ChinaAPI.