Privacy Policy

For account registration, transactions, support, security, and service operations, the Aiaimark operator acts as a data controller. For personal information submitted by customers through the API, we generally act as a processor when handling it only on customer instructions to complete requests, protect the service, and troubleshoot issues.

Customers are responsible for establishing a lawful basis, providing required notices, and handling their end users' rights. Model providers, payment processors, and identity providers may act as our processors or as independent controllers under their own terms.

• Service name: Aiaimark
• Privacy contact: privacy@aiaimark.com
• Legal entity and registered address: as shown at checkout, on the payment receipt, or in a separately signed agreement.

Information you provide

• Account data: email address, hashed password, display name, and optional organization details.
• Authentication data: verification codes, session status, security settings, and account identifiers returned by an authorized sign-in provider.
• Transaction data: amount, currency, order number, payment status, and invoice data. We do not receive or store full card numbers.
• Service content: prompts, files, images, and other inputs submitted through the API or console, plus model outputs. We process this content to complete requests, protect the service, and troubleshoot.
• Support records: inquiries, feedback, and attachments sent through email, Telegram, or another support channel.

Information collected automatically

• IP address, browser, operating system, language, time zone, and approximate region.
• Model usage, token or resource consumption, request time and path, request ID, response status, error code, latency, balance changes, and API key identifier.
• Login records, error logs, performance information, fraud signals, and suspected abuse events.

When you use third-party sign-in, payment, or security features, we may receive the identifiers, email, transaction reference, payment status, or callback result required to complete that operation.

We use cookies, browser local storage, and similar technologies to maintain sessions, remember language and interface preferences, and protect accounts.

As of the policy date, the public Aiaimark website does not deploy independent advertising trackers or third-party marketing analytics.

We do not sell personal information or share it for cross-context behavioral advertising. We disclose data only when necessary:

• Model providers: inputs required to complete your request are sent to the provider of the model you select.
• Infrastructure and communications vendors: for hosting, network delivery, email, authentication, logging, and security under contractual confidentiality obligations.
• Payment processors: Waffo Pancake independently processes card data under PCI-DSS requirements; we receive transaction results and reconciliation information only.
• Legal or business requirements: to answer valid legal requests, protect users or the public, or transfer the service as part of a merger, acquisition, or asset sale.
• With consent: after explaining the recipient, purpose, and data involved.

• HTTPS/TLS for network transport and irreversible password hashing.
• Least-privilege access to production systems and personal information, with security audit records.
• Layered access controls and integrity checks for API keys, payment callbacks, and administrative actions.
• Dependency updates, vulnerability remediation, backups, and anomaly monitoring.

No internet service can guarantee absolute security. We contain and remediate incidents promptly. Where required, we notify affected business customers without undue delay and notify regulators or individuals within applicable legal deadlines.

Backup data is overwritten during normal backup rotation. We may suspend deletion where necessary to comply with law, resolve a dispute, or prevent abuse.

We send essential account verification, balance, billing, security, and policy notices. If we later offer marketing subscriptions, we will send them only with consent and provide an unsubscribe method. Opting out of marketing does not stop essential service notices.

To provide global model access and cloud infrastructure, information may be transferred outside your country, including to the United States, Singapore, and locations where selected providers operate. Where applicable, we use adequacy decisions, standard contractual clauses, or another lawful transfer mechanism and apply data minimization.

The service is intended only for users aged 18 or older. We do not knowingly collect children's personal information. Contact us if you believe a minor has provided information so we can investigate and delete it promptly.

Third-party websites, models, sign-in providers, and payment services process information under their own policies. This policy does not govern their independent processing. Review a provider's privacy and data-use terms before submitting sensitive content.

We may update this policy as our products, vendors, or legal obligations change. We will provide at least 15 days' notice of material changes through the site or registered email, unless law requires a different process.

To exercise a data right, report a security concern, or ask about this policy:

• Privacy: privacy@aiaimark.com
• Support: support@aiaimark.com
• Security: security@aiaimark.com
• Community: Telegram
• Hours: Monday-Friday, 09:00-18:00 (UTC+8), excluding public holidays.