Privacy Policy

Last updated: October 23, 2025

1. Introduction

Welcome to Niansuh ("we", "us", "our", or "Company"). We operate the Niansuh AI Inference API service accessible at niansuh.net and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and ensuring you have a positive experience on our Service. This policy outlines our data handling practices and your rights regarding your personal information.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

We collect several types of information from and about users of our Service:

2.1 Personal Information

  • Email address and name when you create an account
  • Billing information including payment method details (processed securely through third-party payment processors)
  • Profile information you choose to provide
  • Communication preferences and settings
  • Support ticket information and correspondence

2.2 Usage Data

  • API requests, including timestamps, endpoints accessed, and response codes
  • Token usage and model preferences
  • Request frequency and patterns
  • Error logs and debugging information
  • Performance metrics and analytics

2.3 Technical Data

  • IP address and geolocation data
  • Browser type, version, and language settings
  • Device information including operating system and device identifiers
  • Referring URLs and pages visited
  • Time zone settings and access times

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. For detailed information about our use of cookies, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for various purposes, including:

  • Providing, maintaining, and improving our Service
  • Processing your API requests and managing your account
  • Billing and payment processing
  • Sending you technical notices, updates, security alerts, and support messages
  • Responding to your comments, questions, and customer service requests
  • Monitoring and analyzing usage patterns and trends
  • Detecting, preventing, and addressing technical issues and security threats
  • Complying with legal obligations and enforcing our terms
  • Sending you marketing communications (with your consent where required)
  • Conducting research and development to improve our Service

4. Zero Retention Policy

Niansuh maintains a strict zero retention policy for API request data. This means:

  • Your API inputs (prompts, queries, and request payloads) are never stored beyond processing
  • API outputs (model responses) are immediately discarded after delivery
  • We do not use your data to train, improve, or fine-tune any AI models
  • All data is processed in real-time and purged from our systems immediately
  • We maintain only minimal metadata (timestamps, token counts) for billing and rate limiting

This policy ensures your sensitive data remains completely private and is never accessible to third parties, including AI model providers.

Note: Account information, billing records, and usage statistics are retained as necessary for service operation and legal compliance, but never include the content of your API requests or responses.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

5.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service. These providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or subpoena), or to protect our rights, privacy, safety, or property, or that of our users or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership or uses of your personal information.

5.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

6. Data Security

The security of your data is critically important to us. We implement industry-standard security measures to protect your personal information:

  • End-to-end encryption for data in transit using TLS 1.3
  • Encryption at rest for all stored data
  • Regular security audits and penetration testing
  • Access controls and authentication mechanisms
  • Monitoring and logging of security events
  • Incident response procedures and breach notification protocols

Niansuh is SOC 2 Type II and ISO 27001 certified, demonstrating our commitment to maintaining the highest security standards. We undergo regular third-party audits to ensure compliance with these frameworks.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Account information: Retained while your account is active and for 90 days after deletion
  • Billing records: Retained for 7 years for tax and accounting purposes
  • Usage metadata: Retained for 12 months for analytics and service improvement
  • Support communications: Retained for 3 years for quality assurance
  • API request/response content: Zero retention (immediately deleted)

You may request deletion of your account and associated data at any time by contacting us. We will process your request within 30 days, subject to legal retention requirements.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

8.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of that information in a structured, commonly used, and machine-readable format.

8.2 Correction and Update

You have the right to request correction of inaccurate personal information and to update incomplete information.

8.3 Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions (e.g., compliance with legal obligations, resolution of disputes).

8.4 Objection and Restriction

You have the right to object to certain processing of your personal information and to request restriction of processing in certain circumstances.

8.5 Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within 30 days.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there.

We implement appropriate safeguards for international data transfers, including Standard Contractual Clauses approved by the European Commission and other applicable data transfer mechanisms.

10. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

11. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We strongly advise you to review the privacy policy of every site you visit. This Privacy Policy applies only to information collected by our Service.

12. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information held by businesses
  • Right to opt-out of sale of personal information (Note: We do not sell personal information)
  • Right to non-discrimination for exercising CCPA rights

To exercise these rights, please contact us using the information in the "Contact Us" section.

13. GDPR Compliance

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). We process your personal information based on the following legal grounds:

  • Contract performance: Processing necessary to provide our Service
  • Legitimate interests: Processing for our business operations and service improvement
  • Legal compliance: Processing required by law
  • Consent: Processing based on your explicit consent (which you may withdraw at any time)

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date at the top of this Privacy Policy
  • Sending you an email notification (for material changes)
  • Displaying a prominent notice on our Service

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Service after any modifications indicates your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: privacy@niansuh.net
  • Discord: Join our Discord server
  • Response Time: We aim to respond to all inquiries within 48 hours

For data protection inquiries specifically related to GDPR or other regional privacy laws, please include "Data Protection Request" in your subject line to ensure prompt handling.