Privacy Policy

1. Data Controller

• Name: Liu Yang
• Privacy contact: support@modelfold.online
• Data Protection Officer (DPO): not appointed; please send privacy matters to the email above.

2. Personal Information We Collect

3. How We Use Your Information

We do not currently send marketing emails. We may aggregate or de-identify data for statistics; such data cannot identify you. We will not use your Input or Output to train AI models without your explicit consent.

• Provide and maintain the Service, including sending your Input to the relevant model to complete a call — contract performance
• Billing, reconciliation and payment processing — contract performance
• Customer support — contract performance / legitimate interests
• Service notices (verification codes, billing, security, policy updates) — legitimate interests
• Security, fraud prevention and content-safety review — legitimate interests
• Product improvement and aggregated statistics — legitimate interests
• Legal compliance — legal obligation

4. Cookies and Local Storage

• Strictly necessary: browser local storage keeps your login token so you stay signed in (cannot be disabled).
• Functional: language and theme preferences (can be cleared in your browser).
• Analytics: self-hosted Umami, which does not use cookies to track individuals and records only aggregated page views, referrers and device information (can be blocked with Do Not Track or a blocker).
• We do not use marketing or advertising trackers.

5. Sharing and Disclosure

We do not sell your personal information, including "selling" as defined by applicable laws such as the CCPA. We share information only as follows:

• AI model providers: to fulfil your request, we send your Input and necessary parameters to the relevant upstream model service (see Terms Section 2.3), whose processing is governed by its own privacy policy.
• Payment processor: Waffo Pancake (Merchant of Record) processes payments and receives the information needed for checkout; payment card data is handled exclusively by its PCI-DSS compliant systems and never stored on our servers.
• Infrastructure and service providers: Tencent Cloud (hosting, bot verification, business email delivery) and the sign-in provider you choose (Google, GitHub, Microsoft).
• Legal and regulatory requirements: in response to law, court orders or lawful requests from authorities.
• Business transfers: in a merger or acquisition, with prior notice and continued protection.
• With your consent: for other purposes with your explicit prior consent.

6. Security

Please keep your password and API keys safe and do not share them.

• Encryption in transit: HTTPS / TLS across the site.
• Storage security: passwords are hashed; API keys are stored only as hashes and encrypted ciphertext.
• Access control: least-privilege access with audit trails for admin actions.
• If a security incident affects your rights, we will notify you and the relevant authorities within 72 hours of discovery as required by law.

7. Data Retention

• Account information: while your account exists; deleted or anonymized within 90 days after deletion.
• Transaction and billing records: as required by law, typically 5 years.
• Call records and generated content: kept while your account exists so you can review usage and past results; deleted within 90 days after account deletion.
• Support communications: 2 years.
• Security logs: 12 months.

8. Your Rights

You have the rights to be informed, access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. You can update your profile, change your password, sign out devices and revoke API keys yourself in your account; for other requests, contact support@modelfold.online and we will respond within 30 calendar days (identity verification may be required). You may also complain to your local data protection authority.

9. Marketing Communications

We do not currently send marketing messages. If we do in the future, we will ask for your consent first and include an unsubscribe link in every email; unsubscribing does not affect necessary notices such as verification codes, billing and security alerts.

10. International Transfers

Our servers and partners may be located in the Asia-Pacific region, the United States and elsewhere, so your data (including Input sent to model providers) may be processed outside your country. For cross-border transfers we only use providers with an adequate level of protection and, where applicable, safeguards such as EU Standard Contractual Clauses (SCCs).

11. Children

The Service is intended only for users aged 18 and over. We do not knowingly collect information from minors. If you believe a minor has provided us information, contact us and we will delete it promptly.

12. Third-party Links and Services

The Service may contain links to or integrate third-party services. This Policy covers only information we collect directly; please review third parties’ privacy policies before using them.

13. Changes to this Policy

For material changes, we will notify you at least 15 days in advance through a site notice or your registered email, and publish the updated Policy on this page. Continued use after the effective date constitutes acceptance.

14. Contact Us

• Privacy and support email: support@modelfold.online
• Operator: Liu Yang
• Hours: Monday–Friday; we usually reply within 1–2 business days