Privacy Policy

Account Information: The email address you provide during registration, used for account login and service notifications.

Payment Information: Your payment records and transaction details. We do not directly store your bank card or payment account information — payment processing is handled by third-party payment platforms.

Usage Data: Necessary operational information such as request timestamps, token usage, and the models and tools used, for billing and service assurance.

Log & Device Information: Your IP address, browser type, and other basic information for security and anomaly detection.

For successfully completed requests, we do not store your code, conversation content, or prompt information. Your request content is encrypted and forwarded through our servers to upstream providers without retention.

For requests that result in errors, the system may temporarily retain redacted request information for fault diagnosis. This information is automatically purged within 30 days. Redaction removes sensitive credentials such as API keys and passwords.

All upstream AI provider accounts have Data Sharing and Model Training disabled to maximize the protection of your data privacy.

We do not use your data for model training, fine-tuning, distillation, or any AI model improvement purposes.

The information we collect is used solely for the following purposes:

Billing: Accurately calculating charges based on token usage and providing usage details in your Dashboard.

Service Assurance: Monitoring service health to detect and resolve issues promptly, ensuring service stability.

Security: Identifying and preventing abuse to protect the platform and other users.

Legal Obligations: Complying with lawful requests from authorities as required by applicable laws and regulations.

We do not use your data for advertising, user profiling, or any purpose unrelated to the service.

We follow the principle of data minimization, retaining only the information necessary to provide our service.

Operational logs (request timestamps, response status, etc.) are retained for no more than 30 days and automatically purged thereafter.

Billing and transaction records are retained in accordance with applicable legal requirements.

Account information is retained for the duration of your account. Due to audit and compliance requirements, we may not be able to immediately or completely delete all historical information, but will process it as soon as legally permitted.

We employ industry-standard technical and organizational security measures to protect your information, including TLS encryption, access controls, and log auditing.

We do not sell, trade, or rent your personal information to any third party.

We may disclose necessary information to authorities only when required by law or to protect our legitimate interests.

No system can guarantee absolute security. In the event of a security incident, we will notify affected users in accordance with applicable laws and take remedial measures.

As Zlux's service involves forwarding requests to upstream AI providers located outside of mainland China (Anthropic, OpenAI, Google, etc.), your request content may be processed outside the People's Republic of China.

We only transmit information necessary to provide the service, and require upstream providers to adopt appropriate data protection measures. You understand and agree that using this service may involve cross-border data transfer, and you should assess the associated compliance risks on your own.

We only use essential cookies to maintain your login session and basic website functionality. We do not use tracking cookies or third-party advertising cookies.

Zlux uses the following third-party services in its operations: upstream AI providers (Anthropic, OpenAI, Google) for processing your AI requests, and payment platforms for processing payments.

Once your request is forwarded to an upstream provider, the processing, retention, and use of that data is governed by the provider's own privacy policy and terms. Zlux assumes no liability for this. We recommend reviewing the privacy policies of the relevant upstream providers.

We carefully select our partners and require them to adhere to appropriate data protection standards.

You are responsible for ensuring that all data transmitted through this service is legally sourced and compliant with applicable laws. Any legal liability arising from the transmission of unlawful or non-compliant content shall be borne by you.

You have the right to access and correct your personal information. You can manage your account information at any time through the Dashboard, or contact our support team for assistance.

For any further data-related requests, please contact support@zlux.ai.

We may update this Privacy Policy from time to time. Updated policies will be published on our website, and significant changes will be communicated via email. Continued use of our service constitutes acceptance of the updated policy.