Privacy Policy

Last updated:: 30/04/2026

ShopAIKey ("we") respects user privacy and is committed to protecting personal data in accordance with industry-standard practices. This document describes the types of data we collect, the purposes for which we use it, how we store it, and your rights regarding that data. By continuing to use the service, you agree to the terms below.

1. Data We Collect

  • Account Information: email, password (hashed), referral code, role (user/seller/admin).
  • Transaction Information: top-up history, key purchases, transfer details, VietQR information (we do not store your bank account details).
  • API Usage Data: number of requests, model used, token count, timestamp -- used for cost calculation and abuse prevention. We do not store prompt content or response content of requests passing through the proxy.
  • Technical Data: IP address, user agent, request ID, error codes -- used for security, troubleshooting, and performance analysis.
  • Cookies & Similar Technologies: login tokens, interface preferences. Some third-party analytics services (Google Analytics) may set anonymous cookies to measure traffic.

2. Purposes of Data Use

  • To provide, operate, and improve the service.
  • To authenticate users and prevent unauthorized access.
  • To process payments, reconcile transactions, and issue API keys.
  • To provide customer support when you contact us through official channels.
  • To comply with applicable legal obligations in Vietnam when required.

3. Data Sharing with Third Parties

We do not sell or rent your personal data. Data is only shared in the following circumstances:

  • Upstream Providers (Anthropic, OpenAI, Google, etc.): API requests are forwarded to the originating provider per their API standards. Content you submit will also be subject to each provider's policies.
  • Infrastructure Partners: cloud services, CDN, transactional email, payment gateways -- only access data necessary for operations.
  • Government Authorities: when a lawful written request is made pursuant to Vietnamese law.

4. Storage and Security

Passwords are hashed using bcrypt. Admin access is restricted and fully logged. All traffic goes over HTTPS. However, no internet-based system is absolutely secure. You should use strong passwords, do not share your keys with others, and enable 2FA when available.

5. Your Rights

  • Right to access and edit account information in the dashboard.
  • Right to request deletion of your account and personal data (except information legally required to be retained -- e.g., invoices, transaction logs).
  • Right to withdraw consent for marketing emails at any time.

To exercise the above rights, please contact us via email [email protected].

6. Cookies and Analytics

We use necessary cookies for login sessions and some anonymized analytics tools (such as Google Analytics). You can block cookies through your browser settings; some features may not function fully if cookies are disabled.

7. Children

The service is not directed at individuals under 16 years of age. If we discover an account created by a child without guardian consent, we will suspend and delete that account.

8. Changes to This Policy

We may update this privacy policy from time to time. New versions will be published on this page with the date of update. Your continued use of the service after changes to the policy constitutes acceptance of the new version.

9. Contact