隐私与素材

版本：2.0

生效日期：2026 年 8 月 9 日

重要说明： 对于默认的实时 API 转发服务，Moe API 不将您的提示词、消息正文、Base64 图片、上传文件或图片以及模型响应正文作为平台业务数据持久化保存。为生成并返回结果，请求内容必须被临时处理并转发给所选的上游模型服务商。我们仍会保存提供账户、额度、计费、故障排查、安全防护及履行法律义务所必需的信息和技术元数据。任何“不持久化保存”表述仅适用于 Moe API 平台自身的默认业务处理，不代表上游服务商不会依据其规则留存或审查相关内容。

1. 政策目的与适用范围

本《隐私政策》（以下简称“本政策”）说明 Moe API 服务运营方（以下简称“我们”）在您访问或使用 Moe API 网站、控制台、API 接口及明确引用本政策的相关服务（合称“服务”）时，如何收集、处理、保存、共享和保护与您有关的信息，以及您可以行使的选择和权利。

上游模型服务商、支付服务商、第三方客户端、网络与安全服务商可能依据各自的隐私政策独立处理信息。本政策不替代该等第三方政策，也不适用于第三方在其独立决定的目的和方式下进行的处理。

我们可能根据具体处理活动分别作为个人信息处理者、数据控制者或受托处理者。您代表组织通过服务处理终端用户、员工、客户或其他第三方的信息时，该组织通常负责决定处理目的和方式，并负责向相关个人履行告知、取得合法依据、响应权利请求及满足行业监管要求；我们仅在提供服务所必要或法律另有要求的范围内处理相关信息。

2. 我们处理的信息类别

2.1 账户与身份验证信息

当您注册或管理账户时，我们会处理您提供的用户名、经安全哈希处理的密码，以及在启用邮箱验证、通知或账户恢复功能时提供的邮箱地址。我们还会处理账户状态、权限、分组、余额及安全设置。

2.2 API 请求与响应内容

为完成 API 调用，Moe API 会临时读取并处理您提交的提示词、消息、文件、图片、Base64 图片数据、音频、视频或其他输入，将必要内容转发给所选上游模型服务商，并将响应返回给您。

对于默认的实时 API 转发服务，上述 API 请求正文和响应正文不作为 Moe API 的平台业务数据持久化保存。请求处理结束后，本站用于处理请求正文的临时存储会被清理。

上游模型服务商必须接收生成结果所需的请求内容。其处理地点、保留期限、训练政策、安全措施和合规机制可能与 Moe API 不同，并不由我们单方面控制。您不应提交完成任务不需要的密码、API Key、个人敏感信息、国家秘密、商业秘密、医疗记录或其他受严格监管的数据。

如果未来某项可选功能必须持久化保存内容，例如由您主动启用的历史记录、文件存储或异步任务，我们将在启用前明确说明所保存的信息、处理目的和保存期限，并依法取得必要授权或同意。该等可选功能不改变默认实时 API 转发服务不持久化保存请求和响应正文的原则。

2.3 使用、计费与诊断信息

为提供服务、计算费用、展示使用记录、优化路由和排查故障，我们可能处理以下技术元数据：

1. 账户、API Key 的内部标识及 Key 名称；
2. 请求日期、时间、请求编号、所用模型、分组及所选渠道；
3. 输入和输出 Token 数、缓存用量、图片、音频、视频或其他计费单位及扣费金额；
4. 请求是否流式、响应耗时、状态、错误类型及上游请求编号；
5. 节点、路由和服务健康状态等运行信息。

上述记录用于运营、计费和安全，不用于还原您的提示词或模型响应正文。

2.4 日志、设备与网络信息

当您访问网站、登录账户或调用服务时，我们及基础设施服务商可能处理 IP 地址、请求时间、浏览器或客户端类型、用户代理、设备类别、Cookie 标识、安全事件及速率限制信息。普通 API 消耗日志默认不记录 IP；登录、安全、管理操作、支付、异常调查或您主动启用相关选项时，可能记录 IP 地址和必要的设备信息。

2.5 交易与支付信息

当您充值、购买或申请退款时，我们可能处理订单编号、金额、币种、支付状态、交易时间及支付服务商返回的必要交易标识。完整银行卡号、支付账户密码及其他由支付服务商直接收集的敏感支付凭证不由 Moe API 保存。

2.6 通信与支持信息

当您向我们提出账户、计费、技术或隐私问题时，我们会处理您主动提供的联系方式、通信内容、请求编号和为解决问题合理必要的信息。您不应在支持请求中发送完整密码、完整 API Key 或与问题无关的请求正文。

3. 信息处理目的

我们仅在适用法律允许的范围内，为以下目的处理信息：

1. 创建、验证、维护和保护账户；
2. 接收、路由并完成 API 请求；
3. 计算余额、用量和费用，处理充值、退款和交易争议；
4. 展示模型、价格、使用记录和服务状态；
5. 监测性能、诊断故障、优化渠道和提升服务稳定性；
6. 实施身份验证、访问控制、限流、反欺诈和防滥用措施；
7. 回应咨询、投诉、权利请求和其他用户通信；
8. 履行税务、会计、制裁、执法及其他适用法律义务；
9. 在依法取得您同意后提供需要同意的可选功能。

在相关法律要求确定处理依据时，我们可能依据履行与您的合同、遵守法律义务、保护您或他人的合法权益、维护服务安全与正常运营所必要的合法利益，或您的同意进行处理。

4. 信息共享与披露

我们不会出售您的个人信息，也不会为了第三方的独立广告目的共享 API 请求正文。我们仅在下列情形和必要范围内共享或披露信息：

4.1 上游模型服务商

我们向所选上游模型服务商提供完成请求所必需的输入内容、模型参数和技术信息。上游服务商可能作为独立处理者或受托处理者处理这些信息，具体取决于其服务条款、数据政策及适用法律。

4.2 基础设施与服务供应商

托管、网络、CDN、安全防护、数据库、备份、监控、邮件和客户支持等供应商，可能在提供相应功能所需范围内处理信息。我们会在合理可行范围内要求其采取适当的保密与安全措施。

4.3 支付服务商

当您选择在线支付或退款时，我们会向支付服务商提供完成交易、对账、风控及争议处理所必需的订单和账户信息。

4.4 法律、安全与企业交易

当适用法律、有效法律程序或有权机关依法要求，或者为保护用户、第三方、平台及公众的权利、财产和安全所合理必要时，我们可能披露必要信息。如运营主体发生合并、重组、融资、资产转让或类似交易，信息可能依法转移给相关承继方，并继续受到适用的数据保护义务约束。

5. 跨境处理

Moe API 面向多个国家和地区。服务器、上游模型服务商和基础设施供应商可能位于您所在国家或地区之外，使用服务可能涉及信息跨境传输或远程访问。

我们将根据适用法律采取合理的跨境保护措施。境外接收方的类别、跨境目的、信息范围、风险提示以及您的选择和权利，详见《个人信息跨境提供规则》。您有责任确认提交的数据允许由相关上游服务商和基础设施供应商跨境处理。对于受地域、行业或合同限制的数据，您应在完成必要的合规评估和授权前避免提交。

6. 信息保存期限

API 请求和响应正文仅在完成请求所需的短暂期间处理，不在 Moe API 数据库中作为平台业务数据持久化保存。

账户信息通常保存至账户删除或服务终止。计费、交易、登录、安全和审计记录仅在完成结算、处理争议、防止欺诈、恢复备份、维护安全及履行法律义务所合理必要的期间内保存。确定具体期限时，我们会考虑信息类别、处理目的、风险、争议时效、备份周期及适用法律要求；达到目的后，相关信息将被删除、匿名化或以其他方式停止用于日常业务处理。

7. 信息安全

我们采取与服务性质和风险相适应的技术与组织措施，包括 HTTPS 加密传输、生产访问限制、凭证安全处理、网络防护、权限控制、日志审计及备份。只有为履行职责确有必要的人员或供应商方可在授权范围内访问信息。

任何网络服务均无法保证绝对安全。您应使用独立且强度足够的密码，妥善保管并定期轮换 API Key，及时停用泄露的凭证，并避免向不适合的模型或上游服务商提交敏感信息。

如确认发生可能对个人权益造成显著风险的安全事件，我们将依据适用法律采取遏制、调查、修复和通知措施。通知可能包括事件性质、可能影响、已采取或建议采取的措施及联系渠道。出于安全、执法或避免扩大风险的需要，通知内容和时间可能依法受到限制。

8. Cookie 与本地存储

网站使用必要 Cookie 维持登录会话、保障账户安全和提供核心功能，并可能在浏览器本地保存语言、主题、公告已读状态及其他界面偏好。必要 Cookie 被禁用后，登录或控制台功能可能无法正常运行。

如未来使用非必要的分析、广告或类似追踪技术，我们将根据适用法律提供相应说明和选择机制。

9. 您的选择与权利

您可以通过控制台查看或修改账户信息、创建或停用 API Key、查看用量，并在相关功能可用时删除账户。根据您所在地适用的法律，您还可能有权：

1. 请求访问、确认或获取与您有关的个人信息副本；
2. 请求更正不准确或不完整的信息；
3. 请求删除信息，或限制、反对特定处理；
4. 请求以可携带格式获取依法适用的信息；
5. 撤回基于同意进行处理的同意，但不影响撤回前处理的合法性；
6. 就权利请求的处理结果提出申诉或向有权监管机构投诉。

为保护账户和信息安全，我们可能要求验证您的身份和账户权限。删除或限制请求不适用于依法必须保留、完成交易结算、处理争议、维护安全或行使与抗辩法律权利所需的有限记录。

10. 未成年人

服务不面向未达到所在国家或地区可独立同意使用网络服务年龄的儿童。未成年人仅可在父母或法定监护人同意和监督下使用服务，并不应提交自己或他人的敏感个人信息。如果我们确认在不具备适当法律依据的情况下处理了儿童个人信息，将采取合理措施予以删除。

11. 自动化处理、出售与广告

服务可自动执行鉴权、路由、限流、风险识别、计费和异常检测。这些自动化处理主要用于完成请求、保障安全和维持服务，不用于仅凭自动化处理对您作出具有法律效力或类似重大影响的个人画像决定。若未来引入此类决定，我们将依法提供说明、人工复核或退出机制。

我们不出售个人信息，不以向第三方定向广告为目的共享 API 请求正文，也不使用默认实时请求正文建立广告画像。如相关做法发生变化，我们将在开始前更新本政策并依法提供选择或取得同意。

12. 本政策的更新

我们可能因服务、技术、法律或数据处理方式变化而更新本政策。发生重大变更时，我们将通过站内公告、账户通知或其他合理方式告知，并标明新的版本及生效日期。对依法需要另行同意的新处理目的，我们将在开始处理前取得相应同意。

13. 联系我们

如您对本政策、信息处理方式或权利行使有疑问，请通过站内公告所公布的支持渠道联系我们。请提供足以核验账户和处理请求的信息，但不要提交完整密码、完整 API Key 或不必要的请求正文。

---

English Version

Version: 2.0

Effective Date: August 9, 2026

Important Statement: For the default real-time API relay service, Moe API does not persistently store your prompts, message bodies, Base64 images, uploaded files or images, or model response bodies as platform business data. Request content must be processed temporarily and transmitted to the selected upstream model provider to generate and return a result. We retain the information and technical metadata necessary for accounts, balance, billing, troubleshooting, security, and legal obligations. Any statement that content is not persistently stored applies only to Moe API's own default platform processing and does not mean that an upstream provider will not retain or review content under its policies.

1. Purpose and Scope

This Privacy Policy (the “Policy”) explains how the operator of the Moe API service (“we,” “us,” or “Moe API”) collects, processes, retains, shares, and protects information relating to you when you access or use the Moe API website, console, APIs, and any related service that expressly refers to this Policy (collectively, the “Services”), together with the choices and rights available to you.

Upstream model providers, payment providers, third-party clients, and network or security providers may process information independently under their own privacy policies. This Policy does not replace those third-party policies or apply to processing for purposes and by means independently determined by a third party.

Depending on the activity, we may act as a personal-information processor, data controller, or service provider/processor. If you use the Services for an organization to process information about end users, employees, customers, or another person, that organization generally determines the purposes and means of processing and is responsible for notices, lawful bases, rights requests, and sector-specific obligations. We process such information only as necessary to provide the Services or as otherwise required by law.

2. Categories of Information We Process

2.1 Account and Authentication Information

When you create or manage an account, we process the username you provide, a securely hashed password, and an email address when email verification, notification, or account-recovery functions are enabled. We also process account status, permissions, group, balance, and security settings.

2.2 API Request and Response Content

To complete an API call, Moe API temporarily reads and processes prompts, messages, files, images, Base64 image data, audio, video, or other input; transmits necessary content to the selected upstream model provider; and returns the response to you.

For the default real-time API relay service, API request and response bodies are not persistently stored as Moe API platform business data. Temporary request-body storage on Moe API is cleared after processing.

The upstream provider must receive the request content needed to generate a result. Its processing location, retention, training policy, security controls, and compliance measures may differ and are not controlled solely by us. Do not submit passwords, API keys, sensitive personal information, state secrets, trade secrets, medical records, or other strictly regulated data that is not necessary for the task.

If a future optional function requires persistent content storage, such as history, file storage, or an asynchronous task that you choose to enable, we will clearly disclose the information stored, purpose, and retention period before activation and obtain any authorization or consent required by law. Such a function does not alter the default real-time relay principle described above.

2.3 Usage, Billing, and Diagnostic Information

To provide the Services, calculate charges, display usage, optimize routing, and troubleshoot issues, we may process account and internal API-key identifiers, key names, request time and identifiers, model, group, selected channel, input and output token counts, cache usage, image, audio, video or other billing units, charges, streaming status, latency, status, error type, upstream request identifiers, node, route, and service-health information. These records are used for operations, billing, and security and are not used to reconstruct prompts or model response bodies.

2.4 Logs, Device, and Network Information

When you visit the website, sign in, or call the Services, we and our infrastructure providers may process IP address, request time, browser or client type, user agent, device category, cookie identifiers, security events, and rate-limit information. Normal API usage logs do not record IP by default. IP address and necessary device information may be recorded for login, security, administrative actions, payments, abnormal-activity investigations, or where you enable a related setting.

2.5 Transaction and Payment Information

When you add balance, purchase Services, or request a refund, we may process order identifiers, amount, currency, payment status, transaction time, and necessary transaction identifiers returned by the payment provider. Moe API does not retain full card numbers, payment-account passwords, or other sensitive payment credentials collected directly by the payment provider.

2.6 Communications and Support Information

When you raise an account, billing, technical, or privacy question, we process the contact details, communication content, request identifiers, and other information you voluntarily provide and that is reasonably necessary to resolve the issue. Do not send a complete password, complete API key, or unrelated request content in a support request.

3. Purposes and Legal Bases

We process information only as permitted by applicable law to create, authenticate, maintain, and protect accounts; receive, route, and complete API requests; calculate balance, usage, and charges; process payments, refunds, and disputes; display models, prices, usage, and status; monitor performance, diagnose faults, optimize channels, and improve reliability; enforce authentication, access control, rate limiting, fraud prevention, and abuse prevention; respond to inquiries and rights requests; comply with tax, accounting, sanctions, law-enforcement, and other legal obligations; and provide consent-based optional functions.

Where applicable law requires a legal basis, processing may be necessary to perform our contract with you, comply with legal obligations, protect your or another person's rights, pursue legitimate interests in maintaining the security and operation of the Services, or act with your consent.

4. Sharing and Disclosure

We do not sell personal information or share API request content for a third party's independent advertising purposes. We share or disclose information only in the following circumstances and to the extent necessary:

4.1 Upstream Model Providers

We provide the selected upstream model provider with the input, model parameters, and technical information necessary to complete the request. Depending on its terms, data policy, and applicable law, the provider may act as an independent controller or a processor.

4.2 Infrastructure and Service Providers

Hosting, network, CDN, security, database, backup, monitoring, email, and support providers may process information as needed to perform their functions. Where reasonably practicable, we require appropriate confidentiality and security measures.

4.3 Payment Providers

When you choose online payment or a refund, we provide payment providers with the order and account information necessary for transaction processing, reconciliation, risk control, and disputes.

4.4 Law, Safety, and Corporate Transactions

We may disclose necessary information where required by applicable law, valid legal process, or a competent authority, or where reasonably necessary to protect the rights, property, and safety of users, third parties, the platform, or the public. If the operator is involved in a merger, reorganization, financing, asset transfer, or similar transaction, information may be transferred to a successor subject to applicable data-protection obligations.

5. International Processing

Moe API serves multiple countries and regions. Servers, upstream providers, and infrastructure providers may be located outside your country or region, and use of the Services may involve cross-border transfers or remote access.

We will take reasonable cross-border safeguards as required by applicable law. Recipient categories, purposes, information involved, risk notices, choices, and rights are further described in the Personal Information Cross-Border Transfer Rules. You are responsible for confirming that submitted data may be processed across borders by the relevant providers. Data subject to geographic, industry, or contractual restrictions should not be submitted before the necessary compliance assessment and authorization are completed.

6. Retention

API request and response bodies are processed only briefly to complete the request and are not persistently stored in the Moe API database as platform business data.

Account information is generally retained until account deletion or termination. Billing, transaction, login, security, and audit records are kept only for the period reasonably necessary for settlement, disputes, fraud prevention, backup recovery, security, and legal obligations. In determining retention, we consider the category of information, purpose, risk, limitation periods, backup cycles, and applicable law. When no longer needed, information is deleted, anonymized, or otherwise removed from routine business processing.

7. Security

We use technical and organizational measures appropriate to the nature and risk of the Services, including HTTPS encryption in transit, restricted production access, secure credential handling, network protection, access control, logging, and backups. Access is limited to personnel and providers who require it for authorized duties.

No online service can guarantee absolute security. Use a unique strong password, protect and rotate API keys, promptly disable exposed credentials, and avoid submitting sensitive information to an unsuitable model or upstream provider.

If we confirm a security incident likely to present a material risk to individuals, we will take containment, investigation, remediation, and notification measures as required by applicable law. A notice may describe the nature and likely effects of the incident, measures taken or recommended, and a contact channel. Notice content and timing may be lawfully limited to protect security, law-enforcement activity, or the integrity of remediation.

8. Cookies and Local Storage

The website uses necessary cookies to maintain sessions, protect accounts, and provide core functions. Language, theme, notice status, and other interface preferences may be stored locally in your browser. Disabling necessary cookies may prevent login or normal console use.

If we later use non-essential analytics, advertising, or similar tracking technologies, we will provide the disclosures and choices required by applicable law.

9. Your Choices and Rights

You may use the console to review or update account information, create or disable API keys, review usage, and delete the account where available. Depending on applicable law, you may also have the right to request access, confirmation, a copy, correction, deletion, restriction, objection, or portability; withdraw consent without affecting prior lawful processing; appeal a decision; or complain to a competent regulator.

To protect accounts and information, we may verify your identity and authority. Deletion or restriction does not apply to limited records required by law or needed for settlement, disputes, security, or the establishment, exercise, or defense of legal claims.

10. Children

The Services are not directed to children below the age at which they may independently consent to online services where they live. Minors may use the Services only with the consent and supervision of a parent or legal guardian and should not submit sensitive personal information about themselves or others. If we confirm that a child's personal information was processed without an appropriate legal basis, we will take reasonable steps to delete it.

11. Automated Processing, Sale, and Advertising

The Services may automatically perform authentication, routing, rate limiting, risk detection, billing, and anomaly detection. These activities are used to complete requests, maintain security, and operate the Services; they are not used to make solely automated, legally binding or similarly significant profiling decisions about you. If such decisions are introduced, we will provide any explanation, human review, or opt-out required by applicable law.

We do not sell personal information, share API request content for third-party targeted advertising, or use default real-time request bodies to create advertising profiles. If these practices change, we will update this Policy and provide choices or obtain consent before the change takes effect as required by law.

12. Changes to This Policy

We may update this Policy as the Services, technology, law, or data practices change. Material changes will be communicated through a site announcement, account notice, or another reasonable method and will identify the new version and effective date. Where a new purpose requires consent, we will request consent before processing begins.

13. Contact

For questions about this Policy, our data practices, or the exercise of your rights, use the support channel announced on the site. Provide enough information to verify the account and process the request, but do not submit a complete password, complete API key, or unnecessary request content.