1. Data we collect
- Account data: email, name, role, business workspace, login state, and security settings.
- Payment and order data: top-up amount, order ID, payment method, payment status, refund status, payment-provider receipts, and necessary support notes.
- Usage data: request time, route, model or capability, API-key identifier, token counts, point charges, status code, error reason, latency, IP address, and User-Agent.
- Security and audit data: login IP, User-Agent, action records, rate-limit records, business-member actions, and admin actions.
2. How we use data
- Provide AI API access, model marketplace, wallets, business workspaces, and support.
- Calculate points, generate usage logs, process refunds, handle chargebacks, and respond to payment disputes.
- Prevent card fraud, abuse, malicious refunds, API-key leaks, scraping, artificial traffic, and violations of our use rules.
- Maintain reliability, troubleshoot issues, measure costs, and improve the product.
3. Third-party services and sharing
We share necessary data with payment providers, cloud infrastructure, email services, identity and security services, and the AI model service path you choose to use. Sharing is limited to payment, service delivery, safety, and legal compliance.
We do not sell personal data. We do not provide account data to unrelated third parties unless authorized by you, required by law, or necessary to protect the platform and users.
4. Usage logs and risk evidence
To prove delivery of digital services, we retain records such as request time, model capability, token counts, point charges, status, API-key identifier, IP, and User-Agent. These records may be used for billing review, refund review, chargeback responses, security investigations, and compliance.
We work to avoid exposing underlying model providers, internal keys, payment keys, or other sensitive operating details on public pages or customer-facing interfaces.
5. Retention
Account, order, usage, audit, and payment records are retained as needed to provide the service, handle refunds and chargebacks, and meet tax, accounting, and security requirements. When no longer needed, we delete or anonymize data unless law or dispute handling requires continued retention.
6. Your choices and contact
You may contact support@packetlab.app to request access, correction, or deletion of account data. Some billing, usage, risk, and legal records may need to be retained as required.