Data controller
HOUJIAYAN Intelligence (Hohhot, Inner Mongolia, China) is the data controller for any personal data processed by the API gateway. Contact: support@houjiayan.com.
Data we collect
To provide the service, we collect: (1) account data — username, password hash, email (if provided), top-up history, and account balance; (2) usage logs — request timestamps, model names, token counts, and HTTP status codes for the purpose of billing, rate-limiting, and abuse prevention. We retain usage logs for 90 days, after which they are aggregated into anonymous statistics. We do not store the content of your API requests or responses.
Legal basis (GDPR)
For users in the European Economic Area, we process account data on the basis of contract performance (Art. 6(1)(b) GDPR) — without it we cannot provide the service. Usage logs are processed on the basis of legitimate interest (Art. 6(1)(f) GDPR) for billing, security, and capacity planning, balanced against your right to privacy. We do not rely on consent for service operation.
Third-party AI providers
The gateway routes requests to five upstream model providers — DeepSeek, Alibaba (Qwen), MiniMax, Volcengine (ByteDance), and Moonshot AI (Kimi). Prompts and completions are forwarded in real time for inference. We do not authorise these providers to retain, train on, or otherwise use your content; their respective terms of service apply to the inference step only. None of the upstream providers are located in the European Economic Area; by using the API you acknowledge that your prompts will be processed in the providers' respective regions (Mainland China).
International data transfers
Account data is stored on infrastructure located in Mainland China. We are not currently certified under the EU–US Data Privacy Framework or China's CAC standard contract for personal information export. If you require such certification, contact us before signing up; we will evaluate enterprise arrangements on a case-by-case basis.
Retention
Account data: lifetime of account + 12 months after closure. Usage logs: 90 days. Backups: 30 days. Aggregated anonymous statistics: indefinite.
Your rights
You may request access, correction, deletion, or export of your account data at any time by emailing support@houjiayan.com. We respond within 30 days. EEA and UK users additionally have the right to lodge a complaint with their local data protection authority.
Cookies and local storage
The API dashboard uses one functional session cookie (httpOnly, Secure, SameSite=Lax) for authentication. We do not use analytics, advertising, or third-party tracking cookies on the API dashboard.
Changes to this notice
Material changes will be announced on the dashboard at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.