Privacy Policy

1. Collection of Personal Data

We collect personal data when you use our Site and our Service. Personal data is any information that relates to you, identifies you personally or could be used to identify you including, but not limited to: your name, mailing address, email address, and telephone number. Any text or data you input into the Service ("Inputs") may be processed to provide the Service. Inputs are processed only to provide the Service and are not stored by default unless explicitly enabled. Certain technical and usage data may be retained for billing, security, and compliance purposes. We do not control, and are not responsible for, how third-party AI models (including large language models) process, store, or use your Inputs or Outputs, including for model training. You should avoid submitting any sensitive personal data when using the Service. Third-party model providers may have their own data processing and retention policies. Users are encouraged to review the respective providers' privacy policies when using the Service.

The types of personal data that we may collect include, but are not limited to: the personal data you provide to us, personal data collected automatically about your use of our Site or Service, and information from third parties, including our business partners.

Personal Data You Voluntarily Provide to Us

The personal data we collect from you may include:

• Information that you provide by filling in forms on our Site or Service, including information provided at the time of registering and creating an account, using our Service, and sending Inputs.
• Records and copies of your correspondence (including email addresses), if you contact us.
• Your responses to surveys that we might ask you to complete for internal purposes.
• Details of transactions you carry out through our Site and of the fulfillment of Credits purchases.
• Your search queries on the Site.

Personal Data Collected Automatically

As you navigate through and interact with our Site or Service, we may use automatic data collection technologies to collect certain information about your device, browsing actions and patterns, including:

• Details of your visits to our Site, including traffic data, location data, log files, browser history, search, information about links you click and pages you view, and other communication data.
• Information about your computer and internet connection, including your IP address, operating system and browser type, time zone setting, and other unique identifiers.
• Information about your preferences to make your use of the Site more productive, via the use of Cookies.

Cookies and Other Tracking Technology

We may use cookies, embedded scripts, and other similar tracking technologies ("Tracking Technologies") to collect additional personal data automatically as you interact with the Site and to personalize your experience with our Site. These technologies help us recognize you, customize your experience, market products or services to you, and analyze the use of our Service.

Cookies

Cookies are small web files that a site or its provider transfers to your device's hard drive through your web browser that enables the site's or provider's system to recognize your browser and remember certain information. We use first-party and third-party cookies to make our Site function properly, to improve our Site and Services, to make login easier, to recognize you when you return, to track your interaction with the Site, to enhance your experience, and to provide a secure browsing experience.

The following types of cookies are used on our Site:

Where required by applicable law, we will obtain your consent before placing non-essential cookies on your device.

Changing Your Cookie Settings

Your browser may provide you with the option to refuse some or all browser cookies. You may also be able to remove cookies from your browser. Please note, if you set your browser to disable cookies, you may not be able to access secure areas of the Site. You can find more information about how to change your browser cookie settings at http://www.allaboutcookies.org.

Analytics and Other Tracking Technologies

We may use third-party Service Providers to monitor and analyze the use of our Site. Presently, we use Google Analytics. We use analytics and performance monitoring tools to improve the Service. Non-essential cookies (such as analytics cookies) are only enabled after obtaining user consent via a cookie banner. For more information on the privacy practices of Google, please visit: https://policies.google.com/privacy?hl=en. Google Analytics Opt-out Browser Add-on is available at: https://tools.google.com/dlpage/gaoptout.

We may also use Tracking Technologies to collect "clickstream" data, such as the domain name, device type, IP address, browser type and version, operating system and platform, average time spent on our Site, and other relevant statistics. We use PostHog for this purpose. You may review PostHog's terms here: https://posthog.com/terms.

Pages of our Site and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs), and session replay tools that permit us to track purchase and transaction events, count users who have visited pages or opened an email, and monitor user behavior.

2. How We Use Your Personal Data

We will only use your personal data as described in this Privacy Policy or as disclosed to you prior to such processing taking place. The purposes for which we may use your personal data include:

• Providing the Service.
• Contacting you regarding the administration of any features or functions of the Site or Service you have registered to use.
• Providing you with notices about your account.
• Notifying you about changes to our Site, our policies, terms or any products or Service we offer.
• Sending you marketing and promotional emails.
• Responding to your questions or other requests.
• Allowing you to participate in the interactive features of the Site and Service.
• Tailoring your experience on the Site or Service.
• Saving your user account, registration and profile data or other personal data.
• Tracking your return visits to and use of the Site and Service.
• Accumulating and reporting aggregate, statistical information in connection with the Site and user activity.
• Determining which features and services users like best to help us operate, enhance and improve our Site.
• Keeping you secure and safe while using our Site, combating spam, malware, malicious activities or security risks.
• Improving and enforcing our security measures.
• Maintaining legal and regulatory compliance.
• Enforcing compliance with our Terms of Service and other policies.
• Investigating and resolving disputes.
• Investigating and preventing fraud, abuse, and violations of our Terms of Service.
• Protecting you, others and our business.
• For any other purpose disclosed to you prior to you providing us your personal data or which are reasonably necessary to provide the Service.

We do not use your Inputs or Outputs to train AI models.

Data Classification and Management

We classify the data we collect into three categories based on privacy sensitivity, applying different usage, storage, and protection rules for each type:

For scenarios where your input and output content is used for AI model training, we will provide a separate opt-in consent option that is not tied to service usage or log storage functionality. You may freely choose whether to consent, and you may withdraw this consent at any time. Upon withdrawal, we will securely delete your related training data.

Aggregated and De-identified Information

We may process personal data in an aggregated or de-identified form to analyze the effectiveness of our Services, study user behavior, and to share with corporate partners, including in the following ways:

• To process Feedback. In so doing, we disassociate Inputs and Outputs from your user ID.
• To create analytics reports to share on our Site. We disassociate Inputs and Outputs from your user ID and assign a topic category to each Input.
• To improve the user experience. We analyze and aggregate general user behavior and usage data that does not identify individual users.
• With corporate partners. With your consent, we may disclose Inputs in aggregated, de-identified form in connection with a contractual relationship with corporate partners.

3. How We Share and Disclose Your Personal Data

We may share or disclose your personal data in the following circumstances:

4. Your Rights and Choices

Marketing Communications

We strive to provide you with choices regarding the personal data you provide to us. If you do not wish to have your email address or other contact information used by us to promote our Service, you can opt-out by sending an email stating your request to support@basicrouter.ai. You may also choose to stop receiving our promotional or marketing communications by following the "unsubscribe" instructions included in these messages.

Keeping Your Personal Data Accurate and Deletion

We are committed to ensuring that your personal data is kept accurate and up to date. You can review and change your personal data by logging into the Site and visiting your account profile page. You may also send us an email at support@basicrouter.ai to request access to, or to correct any personal data. If you no longer wish to use our Service or have your personal data processed, you may request to delete your account by emailing us at support@basicrouter.ai. Once you confirm your request to delete your account and data, this process cannot be canceled, undone, withdrawn, or reversed.

Rights Regarding Your Personal Data

Depending on where you live and the laws that apply in your country of residence, you may have certain rights regarding your personal data. While we strive to prioritize the protection of personal data and comply with all applicable laws, we may decline a request from you if we have a lawful reason for doing so.

To exercise your rights, you or your authorized agent may submit a request by email at support@basicrouter.ai. We may first request additional information to verify your identity before processing your request.

5. Data Security

In anticipation of future regulatory requirements from the Personal Data Protection Commission (PDPC), we have proactively established security measures benchmarked against their expected standards to maintain a compliance baseline. We implement and maintain physical, technical and administrative security measures, including access controls, encrypted transmission, and security incident response procedures, designed to protect Your Data from accidental loss and from unauthorized access, use, alteration and disclosure. All personal data you provide to us is stored on our secure servers behind firewalls.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Site, you are responsible for keeping this password confidential. You should not share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our Site. Any transmission of personal data is at your own risk.

6. Integration of Third-Party Platforms and Services

The Site may be linked to, rely on and be integrated with websites, applications, interfaces, services and platforms operated by other companies, including Third-Party Services. We are not responsible for the privacy practices of such websites, applications, interfaces, services and platforms operated by third parties. Once you leave this Site via a link or access a third-party service, you should check applicable privacy policies. This Privacy Policy applies solely to information collected by BasicRouter.

7. Personal Data Retention

We are subject to applicable laws on the retention of information and will retain your information according to data type within the following specified periods to comply with our business and legal obligations:

• Financial transaction records, KYC identity verification documents, accounting vouchers: retained for 5 years after transaction completion
• Accounting books: retained for 10 years
• General user behavioral data: retained for up to 3 years after service termination (securely deleted or anonymized)
• Customer service conversation records: retained for 1-3 years (securely deleted)
• Prompt / conversation content: service usage period + 1 year (users may request early deletion)

When the personal data we have collected reaches its corresponding retention period, we and our service providers will perform secure deletion or anonymization processing as permitted or required by applicable laws, implementing full data lifecycle management.

8. Eligibility

This Site is offered and available to users who are at least 16 years of age, or the minimum age required in your jurisdiction. By using the Site, you represent and warrant that you meet this age requirement and that your parent or guardian has granted you permission to use the Site, or that you are of legal age to form a binding contract with us. If you do not meet all of these requirements, you must not access or use our Site.

9. Data Transfers

When you access our Site or Service, your personal data may be transferred to our servers in the US, or to other countries outside the European Economic Area ("EEA") and the UK. When information is transferred outside the EEA or UK, we ensure it benefits from adequate legal protection by relying on adequacy decisions from the European Commission under Article 45 of the GDPR, and standard contractual clauses approved under Article 46 of the GDPR.

10. Governing Law

All disputes arising out of or relating to the Privacy Policy or the purchase, registration, or use of any BasicRouter product or Service shall be governed by and construed in accordance with the laws of Hong Kong, regardless of where you access the Site or the Service, and notwithstanding any conflicts of law principles.

11. Additional U.S. State Disclosures and Legal Bases for Processing Under the GDPR

The GDPR and some U.S. state privacy laws require specific disclosures. The information below provides additional information about the categories of personal data we collect and how we use and disclose that information.

Categories of Personal Data:

We collect the following information, as described above: Identifiers, such as your name, contact details, IP address, and other device identifiers; Commercial information, such as your transaction history; Network activity information, such as how you interact with our Service; Communication information, such as your contact information when you send us email; Geolocation data, such as the general area from which your device accesses our Service; Your account credentials.

Use of Personal Data

We use this information for the following purposes: Provide, analyze, and maintain our Service (legal basis: perform a contract with you); Improve and develop our Service and conduct research (legal basis: legitimate interest); Communicate with you (legal basis: your consent); Prevent fraud, illegal activity, or misuses of our Service (legal basis: legitimate interest and legal obligation); Comply with legal obligations (legal basis: legitimate interest and legal obligation).

Disclosure of Personal Data

We may disclose this information in the following circumstances: Vendors, service providers, and affiliates to process in accordance with our instructions; Government authorities or other third parties for the legal reasons described above; Parties involved in corporate transactions; Other users and third parties you interact or share information with.

12. Model Provider Service and Privacy Terms

The large model services available on this platform are provided by third-party cloud vendors. Privacy rules and data service policies related to the models are subject to the terms published on the official websites of the respective vendors.

Details: