1. 引言
LittleOrange（以下简称“我们”或“本平台”）深知隐私对您的重要性，并致力于保护您的个人信息。本隐私政策旨在向您说明我们如何收集、使用、存储、共享和保护您在使用我们的大模型 API 融合服务及相关产品（以下统称“服务”）时提供的个人信息。
在使用我们的服务前，请您务必仔细阅读并透彻理解本隐私政策。如果您使用我们的服务，即意味着您同意我们按照本隐私政策收集、使用、储存和分享您的相关信息。
2. 我们收集的信息
为了向您提供服务、提升服务质量以及保障账号安全，我们会收集以下类型的信息：
2.1 您直接提供的信息
- 注册信息：当您注册账号时，我们会收集您的电子邮件地址、手机号码、密码及用户名。
- 认证信息：如果您是企业用户，为了合规及开具发票，我们可能需要收集您的企业名称、营业执照信息、联系人姓名及联系方式。
- 支付信息：在您充值或支付账单时，我们会收集您的账单地址及支付渠道所需的必要交易记录（我们不会直接收集或存储您的完整信用卡号，这些信息由第三方支付机构安全处理）。
- 沟通记录：当您与我们的客服团队联系时，我们可能会保存您的通信记录及您提供的其他信息。
2.2 在您使用服务过程中收集的信息
- 日志信息：当您使用我们的 API 或访问我们的网站时，我们的服务器会自动记录一些信息，包括您的 IP 地址、API Key、调用时间、调用的模型名称、请求大小（Token 数）及请求状态码。
- 设备与浏览器信息：访问控制台时，我们会收集您的设备类型、操作系统类型及版本、浏览器类型及版本。
- 内容数据（重要声明）：作为 API 网关服务提供商，我们会临时处理您发送给大模型的 Prompt（提示词）以及模型返回的 Completion（生成内容）。我们承诺：除为您提供即时路由和转发服务外，我们不会将您的任何业务数据（包括 Prompt 和 Completion）用于模型训练，也不会对其进行持久化存储。
3. 我们如何使用您的信息
我们收集的个人信息将用于以下目的：
- 提供、维护和改进我们的 API 服务；
- 处理您的注册请求，验证您的身份；
- 处理订单、生成账单并完成结算；
- 向您发送服务通知、技术更新及安全警报；
- 响应您的客户服务请求并提供技术支持；
- 监控和分析服务的使用情况及趋势，以优化用户体验；
- 防止欺诈、滥用行为，保障平台和用户的安全；
- 履行法定义务及合规要求。
4. 信息的共享与披露
我们不会将您的个人信息出售给任何第三方。我们仅在以下情况下共享您的信息：
- 大模型提供商：为了实现 API 调用，我们需要将您的请求内容（不包含您的账号身份信息）转发给您选择的底层模型提供商（如 OpenAI、Anthropic、Google 等）。请注意，这些提供商有其各自的隐私政策。
- 第三方服务提供商：我们可能会聘请第三方公司来协助我们提供服务（如云服务器提供商、支付处理商、邮件发送服务商等）。我们仅会向他们提供履行职责所必需的信息，并要求他们遵守严格的保密义务。
- 法律要求：在法律、法规、法律程序或政府强制性要求的情况下，我们可能会披露您的信息。
- 业务转移：如果我们发生合并、收购或资产出售，您的个人信息可能会作为业务资产的一部分被转移。在此种情况下，我们会要求新的持有者继续受本隐私政策的约束。
5. 数据安全与存储
我们采取多项安全措施来保护您的信息：
- 所有 API 数据传输均强制使用 TLS/HTTPS 加密协议。
- 敏感信息（如密码、API Key）在数据库中均经过高强度哈希加密存储。
- 实施严格的访问控制机制，仅限授权员工在必要时访问系统后台。
- 您的个人信息仅在实现本政策所述目的所必需的期限内保留，除非法律要求或允许在更长的期间内保留。
6. 您的权利
根据适用法律，您对您的个人信息拥有以下权利：
- 访问与更正：您可以登录控制台查看并修改您的基本信息。
- 删除账号：您可以通过工单或联系客服申请注销账号并删除您的个人数据。
- 撤回同意：您有权撤回之前授予我们的同意，但这不影响撤回前基于同意进行的数据处理的合法性。
7. 政策的更新
我们可能会不时更新本隐私政策。如果我们对本政策进行重大修改，我们会在网站上发布醒目的通知或通过电子邮件通知您。您继续使用我们的服务即表示您同意更新后的隐私政策。
1. Introduction
LittleOrange ("we", "us", or "our") understands the importance of privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect the personal information you provide when using our LLM API gateway services and related products (collectively, the "Services").
Please read this Privacy Policy carefully before using our Services. By using our Services, you agree to the collection, use, and sharing of your information as described in this Privacy Policy.
2. Information We Collect
To provide you with our Services, improve service quality, and ensure account security, we collect the following types of information:
2.1 Information You Provide Directly
- Registration Information: When you register an account, we collect your email address, phone number, password, and username.
- Authentication Information: If you are an enterprise user, we may need to collect your company name, business license information, contact person name, and contact details for compliance and invoicing purposes.
- Payment Information: When you top up or pay a bill, we collect your billing address and necessary transaction records (we do not directly collect or store your full credit card number; this is handled securely by third-party payment processors).
- Communication Records: When you contact our customer support team, we may retain records of your communications and any other information you provide.
2.2 Information Collected During Service Usage
- Log Information: When you use our API or visit our website, our servers automatically record certain information, including your IP address, API Key, request timestamps, requested model names, request sizes (Token counts), and status codes.
- Device and Browser Information: When you access the console, we collect your device type, operating system type and version, and browser type and version.
- Content Data (Important Notice): As an API gateway provider, we temporarily process the Prompts you send to the LLMs and the Completions returned by the models. We promise: Except for providing immediate routing and forwarding services to you, we will NOT use any of your business data (including Prompts and Completions) for model training, nor will we persistently store it.
3. How We Use Your Information
We use the personal information we collect for the following purposes:
- To provide, maintain, and improve our API services;
- To process your registration requests and verify your identity;
- To process orders, generate bills, and complete settlements;
- To send you service notices, technical updates, and security alerts;
- To respond to your customer service requests and provide technical support;
- To monitor and analyze service usage and trends to optimize user experience;
- To prevent fraud, abuse, and protect the security of our platform and users;
- To comply with legal obligations and regulatory requirements.
4. Sharing and Disclosure of Information
We will not sell your personal information to any third parties. We only share your information in the following circumstances:
- LLM Providers: To fulfill API calls, we need to forward your request content (excluding your account identity information) to the underlying model providers you select (e.g., OpenAI, Anthropic, Google). Please note that these providers have their own privacy policies.
- Third-Party Service Providers: We may engage third-party companies to assist us in providing the Services (such as cloud server providers, payment processors, email delivery services). We will only provide them with the information necessary to perform their duties and require them to abide by strict confidentiality obligations.
- Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
- Business Transfers: If we undergo a merger, acquisition, or sale of assets, your personal information may be transferred as part of the business assets. In such cases, we will require the new holder to continue to be bound by this Privacy Policy.
5. Data Security and Storage
We implement multiple security measures to protect your information:
- All API data transmissions strictly require TLS/HTTPS encryption protocols.
- Sensitive information (such as passwords, API Keys) is stored in the database using high-strength cryptographic hashing.
- We enforce strict access control mechanisms, allowing only authorized employees to access the backend systems when necessary.
- Your personal information is retained only for the period necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.
6. Your Rights
Subject to applicable law, you have the following rights regarding your personal information:
- Access and Correction: You can log into the console to view and modify your basic information.
- Account Deletion: You can apply to cancel your account and delete your personal data by submitting a ticket or contacting customer service.
- Withdrawal of Consent: You have the right to withdraw the consent you previously granted us, though this will not affect the lawfulness of data processing based on consent before its withdrawal.
7. Updates to this Policy
We may update this Privacy Policy from time to time. If we make material changes to this policy, we will post a prominent notice on our website or notify you by email. Your continued use of our Services indicates your agreement to the updated Privacy Policy.