Privacy at UApiPro

When you sign up: an email address (used to send the verification code, password resets, and security notices) and an optional display name. Passwords are stored as Argon2 hashes; we never see the plaintext.

When you call the API: the request method, path, status code, response size, and a coarse-grained timestamp may be written to an access log. By default, request parameters, request bodies, request headers, and response bodies are not retained.

When you load the website: minimal first-party analytics (page URL, referrer, viewport size). No third-party cross-site tracking and no advertising cookies.

Security access logs are retained for at least six months as required for network security. Business access logs are retained for 30 days and then aggregated and deleted. Account data is deleted after account closure; only payment and tax records are retained for the legally required period and are not used for any other purpose.

We do not sell user data. We share the minimum necessary billing information with our payment processor when you buy a credit pack, and the minimum necessary email metadata with our email provider when we send you a verification code or receipt. We do not share request payloads or call patterns with anyone outside the platform.

To close your account, use the AxT account security page. To request deletion of other information or export your data, email security@mail.uapis.cn. We generally respond to access, correction, deletion, and export requests within 15 business days.

AI agents calling the API on a user's behalf are bound by the same terms as human users: do not store API keys client side, do not log credentials in transcripts, surface our error messages verbatim. See /AGENTS.md.