logoPofano

Privacy Policy

Pofano is an AI API gateway service (the "Service") operated by the person or organization that publishes and maintains the Pofano website ("we," "our," or "us"). This Privacy Policy explains how we collect, use, share, and protect your information. This Policy is effective immediately upon publication.

1. Information We Collect#

Account Information#

When you register, we collect account information such as your username, email address, authentication credentials, and login-related identifiers. If you sign in through OAuth, passkeys, or other third-party authentication methods, we receive the information necessary to authenticate your account.

API Usage Data#

We process your API requests, including prompts, inputs, files, images, audio, model selection, parameters, and responses, to provide the Service and forward requests to upstream providers. As a normal service record, we generally do not store full prompt or response content. We may record limited usage metadata such as model names, token counts, request identifiers, timing, quota consumption, status, and error information for billing, monitoring, troubleshooting, and abuse prevention. Debug, error, or security logs may temporarily include limited request or response excerpts when necessary to operate and secure the Service.

Payment Information#

If you purchase credits, plans, or subscriptions, third-party payment providers collect and process payment details. We do not store full payment card numbers on our servers.

Log and Device Data#

We automatically collect IP addresses, browser type, device information, timestamps, and interaction logs for security, diagnostics, and service improvement.

Cookies and Local Storage#

We use essential cookies and local storage for authentication, session management, language preferences, and security. We do not use advertising cookies.

2. How We Use Your Information#

  • To provide, maintain, and improve the Service.
  • To process billing and manage your account.
  • To detect and prevent fraud, abuse, and security incidents.
  • To communicate service updates, policy changes, and support responses.
  • To comply with legal obligations.

3. Third-Party Sharing and Processing#

Upstream AI Providers#

When you make API requests, your prompt content, model parameters, and output may be transmitted to third-party AI model providers. Each provider has its own data handling policies. We recommend reviewing those policies before submitting sensitive information.

OAuth Providers#

If you sign in via OAuth, we receive profile data from the OAuth provider per your consent.

Payment Processors#

Payment transactions are processed by third-party payment services. We share only the information necessary to create orders, complete payments, verify payment status, prevent fraud, and handle support or disputes.

We may disclose information if required by law, court order, or to protect our rights, property, or safety.

4. Data Security#

We implement reasonable technical and organizational measures to protect your information. However, no method of electronic storage or transmission is completely secure.

5. Data Retention#

We retain your information as long as your account is active or as needed to provide the Service. Usage logs may be retained for billing, monitoring, and legal compliance purposes. Upon account deletion, we will remove or anonymize your personal data within a reasonable timeframe.

6. Your Rights#

Depending on your jurisdiction, you may have rights to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict certain processing.
  • Data portability.

7. Children's Privacy#

The Service is not intended for individuals who have not reached the applicable digital service age or legal consent age in their jurisdiction. If applicable law requires consent from a parent or guardian, you may use the Service only after obtaining valid consent. We do not knowingly collect information from children in violation of applicable law.

8. Cross-Border Data Transfers#

Your information may be transferred to and processed in countries other than your own. We take steps to ensure adequate protection as required by applicable law.

The Service may contain links to third-party websites. We are not responsible for their privacy practices.

10. Changes to This Policy#

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service. Continued use after changes constitutes acceptance.

11. Contact Us#

For privacy-related inquiries, contact: