Privacy Policy

Last updated: July 1, 2026

1. Information We Collect

We collect the following personal data when you use AIWave:

• Account information: Email address, username, and authentication provider data (GitHub/Discord profile) when you register or log in
• Payment information: Payment card details and billing address — these are processed and stored by our payment partner Waffo Pancake, not by AIWave
• Usage data: API request metadata including model name, number of tokens processed, timestamp, and IP address. We do not log the content of API requests or responses beyond billing requirements
• Communication data: Email correspondence and support chat messages
• Website analytics: Page visits, referral sources, and browser information collected via Google Analytics

2. How We Use Your Data

We use your data for:

• Service delivery: Processing API requests, billing, and account management
• Payment processing: Transmitting payment information to Waffo Pancake for transaction completion
• Analytics: Understanding usage patterns to improve our service
• Communication: Responding to support requests and sending service announcements
• Security: Detecting and preventing abuse, fraud, and unauthorized access

3. Third-Party Sharing

We share your data with the following third parties for service delivery:

• Waffo Pancake: Payment processing — receives billing information to process transactions
• GitHub / Discord: Authentication — receive authentication requests when you log in via OAuth
• Google Analytics: Website analytics — receives anonymized browsing data
• Upstream AI providers: Receive API requests (model name and input/output tokens only, not your personal identity)

We do not sell your personal data to third parties.

4. Data Security Measures

We implement the following security measures to protect your data:

• Encryption in transit: All API communications use TLS 1.3
• API key authentication: Access is gated by unique API keys with optional IP whitelisting
• Access controls: Server access is restricted to authorized administrators
• Data minimization: We collect only the data necessary for service operation
• Regular updates: Our systems are kept up to date with security patches

5. Your Data Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request export of your data in a machine-readable format
• Objection: Object to certain processing activities

To exercise these rights, contact us at [email protected].

6. Data Retention

Account data is retained until you delete your account. Usage logs are retained for 12 months for billing and abuse prevention purposes. After this period, logs are anonymized or deleted.

7. Cookies & Tracking

We use essential cookies for authentication and session management. Google Analytics uses cookies to collect anonymized usage statistics. You can opt out of analytics cookies through your browser settings.

8. International Data Transfers

Your data may be processed in Hong Kong SAR and Singapore. By using the Service, you consent to such transfers. Appropriate safeguards are in place to protect your data.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email or platform announcement.

10. Contact

For privacy-related inquiries:

Email: [email protected]
Website: https://aiwave.live