Privacy Policy
Effective date: August 29, 2026
This page explains what data ByteSeek Tokens (operated by ByteSeek Limited, a company incorporated in Hong Kong) collects, what it is used for, how long it is kept, and the rights you have. This policy describes only data processing that actually exists.
What we collect
Passwords are stored as salted hashes only; API keys are stored as hashes, with the plaintext shown once at creation.
About your request content
The gateway's job is forwarding. Request bodies go to the upstream model provider you choose; we do not manually inspect request content. Error logs kept for troubleshooting record truncated error summaries only, not full requests. For groups labelled "data sharing disabled", conversation data is not stored.
How upstream providers handle data is governed by their own privacy policies; we transmit only what is necessary to complete each call.
What we do not do
- We do not sell any of your data;
- We do not train models on your request content;
- We do not give your personal information to third parties beyond what the service requires.
Third-party processing
To provide the service, these categories of third parties process some data within necessary limits:
- Upstream model providers: process your request content to return model output;
- Payment providers: process payment information for charges and refunds (we do not store full card numbers or similar sensitive payment data);
- Infrastructure providers: servers, networking, and security protection.
We share only the minimum necessary data with parties required to deliver the service, and require confidentiality and security obligations from them.
Disclosure required by law
We may disclose necessary information: in response to lawful requests from competent authorities; to comply with legal obligations or protect the platform's and users' lawful rights; to handle payment fraud or security incidents. Unless prohibited by law, we make reasonable efforts to notify affected users.
Cookies
We use necessary cookies and similar technologies to maintain sign-in state and core functionality. We do not use third-party advertising trackers. Disabling cookies may prevent sign-in.
Cross-border processing
Our servers and upstream model services may sit in different jurisdictions. By using the service you acknowledge and consent to cross-border transfers necessary to deliver it; transfers are protected with encryption and similar measures.
Your rights
- View and export your usage logs in the console at any time;
- View and correct account information;
- Request account deletion via the support email: after settlement, account data is deleted (except financial records the law requires us to keep);
- Contact us any time with questions or objections about data processing.
Security measures
- HTTPS encryption throughout;
- API keys and passwords stored as hashes only, plaintext never written to disk;
- Least-privilege internal access;
- If a data-security incident may affect your rights, we notify you promptly as required by law, with remediation details.
Minors
The service targets users with full legal capacity and is not directed at minors. We do not knowingly collect minors' personal information; guardians who find a minor using the service without consent should contact us.
Updates
This policy may be updated from time to time; updates are published here with a refreshed effective date, and material changes are additionally announced in reasonable ways.
Contact
- Support: Support@mail.byteseek.ai
Related: Service Terms · Acceptable Use Policy · Disclaimer