English (controlling)
ChimeraHub (“we”, “us”, or “our”) respects your privacy. This Privacy Policy (“Policy”) describes how we collect, use, store, and share personal information when you use ChimeraHub (the “Service”) at https://api.chimerahub.org/.
Please read this Policy before using the Service. Using the Service means you have read and agree to it. We may update this Policy from time to time; material changes will be announced by email or in-product notice.
1. Data controller
- Name: ChimeraHub (individual / sole trader operating the Service)
- Privacy contact: hykflb@qq.com
- Data Protection Officer: Not appointed
2. Personal information we collect
2.1 Information you provide
- Account information: email address, password (stored hashed), display name if you set one.
- Payment information: transaction amount and payment status. We do not store full card numbers — card data is handled by the payment processor (see Section 5).
- Support records: emails, tickets, and feedback you send us, including QQ messages if you contact us that way.
- Service content: prompts, files, and other inputs you submit to the API or Studio, which we process to fulfill your request.
2.2 Information collected automatically
- Device and network: IP address, approximate region, browser type, operating system, time zone.
- Usage: pages and features used, request timestamps, token/credit consumption, session duration.
- Logs: error logs, performance data, and security events.
We do not collect precise geolocation, and we do not require third-party social logins to use the Service.
3. How we use personal information
| Purpose | Legal basis |
|---|---|
| Provide and maintain the Service | Contract |
| Billing and payment processing | Contract |
| Customer support | Contract / legitimate interests |
| Service notices (billing, security, policy updates) | Legitimate interests |
| Security and fraud prevention | Legitimate interests |
| Product reliability and abuse detection | Legitimate interests |
| Legal compliance | Legal obligation |
We do not send marketing emails unless you separately opt in. We may aggregate or de-identify data for statistics; that data cannot reasonably identify you.
4. Cookies and tracking
| Type | Purpose | Can be turned off |
|---|---|---|
| Strictly necessary | Keep you signed in; core console and checkout functions | No |
| Security | Cloudflare Turnstile bot check on login, registration, and similar forms | No (required to use those forms) |
| Functional | Language or UI preferences you set | Yes, via browser settings |
We do not use third-party advertising pixels or marketing cookies. We do not use Google Analytics. You can control cookies through your browser; blocking strictly necessary cookies will prevent login.
5. Sharing and disclosure
We do not sell your personal information, including “sale” as defined under laws such as the CCPA.
We share information only in these cases:
- Service providers bound by confidentiality: cloud hosting, email delivery, security (including Cloudflare Turnstile), and customer support tools. Payment card data is processed exclusively by our PCI-DSS compliant processor Waffo Pancake and is not stored on our servers.
- Upstream AI providers (including OpenAI, Anthropic, Google, and other vendors we route to): we send the prompts, files, and parameters needed to complete your request. Their use of that data is governed by their own terms and privacy policies.
- Legal and regulatory requests when required by law, court order, or a competent authority.
- Business transactions such as a merger or sale, with notice and continuation of protection obligations.
- With your consent for any other purpose.
6. Security
- Transport encryption: TLS / HTTPS.
- Passwords stored hashed; we do not store full card numbers.
- Access control on a need-to-know basis.
- Server logs reviewed for abuse and incidents.
If a security incident is likely to affect your rights, we will notify you and relevant authorities as required by law, aiming to do so within 72 hours of becoming aware of it. Keep your credentials private and do not share them.
7. Retention
| Data | Period | Afterwards |
|---|---|---|
| Account information | While the account is active; 90 days after deletion | Delete or anonymize |
| Transaction / credit records | Typically 7 years, as required for accounting | Delete or archive |
| Support correspondence | 2 years | Secure deletion |
| Security and access logs | 12 months | Secure deletion |
| Prompts and generated files | Only as needed to complete the request and any short-term delivery cache; not used for model training | Delete per product lifecycle |
8. Your rights
To exercise the following rights, email hykflb@qq.com. We will respond within 30 calendar days.
| Right | What it means |
|---|---|
| To be informed | Know what we collect and how we use it |
| Access | Obtain a copy of your personal information |
| Rectification | Correct inaccurate or incomplete information |
| Erasure | Request deletion in circumstances allowed by law |
| Restriction | Ask us to pause certain processing |
| Portability | Receive your data in a machine-readable format |
| Objection | Object to processing based on legitimate interests |
| Withdraw consent | Where processing is based on consent |
If you believe we have not handled your request properly, you may complain to your local data-protection authority.
9. Marketing
We do not send promotional marketing by default. Service-necessary notices (billing, security, policy updates) are not marketing and cannot be fully opted out while you keep an account. If we ever introduce optional newsletters, they will require consent and include an unsubscribe link.
10. International transfers
Our servers are located in the United States (Los Angeles). Upstream AI providers and Waffo Pancake may process data in other countries. When we transfer personal information internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) where they apply, and we only send what is needed to provide the Service.
11. Children
The Service is for users 18 years of age or older. We do not knowingly collect information from anyone under 18. If you believe a child has provided information, contact us and we will delete it promptly.
12. Third-party links and services
The Service may link to third-party sites or send requests to third-party AI providers. This Policy applies only to information we collect. We are not responsible for third-party privacy practices; review their policies before use.
13. Changes
For material changes, we will give at least 15 days’ notice by site announcement or email to your registered address, and we will update the “Last updated” date on this page. Continued use after the effective date constitutes acceptance.
14. Contact
- Privacy and support: hykflb@qq.com
- Instant message: QQ 1241789369
- Operator: ChimeraHub
- Website: https://api.chimerahub.org/
This Policy is provided for transparency and does not constitute legal advice.
Last updated: 13 August 2026 · ChimeraHub · https://api.chimerahub.org/