Privacy Policy
Xing Bao Ku PTE LTD — Effective: January 2026
1. Information We Collect
1.1 Account Information
- Name, email address, phone number (if provided)
- Company name (if provided)
- Payment information (processed by third-party payment providers)
1.2 Usage Data
- API request logs (timestamps, token counts, model used, response codes)
- IP addresses and user agent strings
- Feature usage patterns
1.3 Content Data
- Prompts and AI-generated outputs (transiently processed, not stored permanently)
- Configuration files and preferences
2. How We Use Your Information
- To provide and maintain the Service
- To process billing and payments
- To monitor service health and prevent abuse
- To communicate service updates and security notices
- To improve our services (using aggregated, anonymized data only)
3. Data Sharing
We do not sell your personal data. We may share data with:
- AI model providers — your prompts are forwarded to upstream model APIs for processing. These providers have their own privacy policies.
- Payment processors — for billing purposes (e.g., Stripe)
- Infrastructure providers — for hosting and service delivery
- Legal authorities — when required by law or court order
4. Data Retention
- Account data: Retained while your account is active.
- Usage logs: Retained for 90 days for billing and debugging.
- Billing records: Retained for 7 years as required by Singapore tax law.
- Prompts/outputs: Not stored. Processed in real-time and discarded.
5. Data Security
We implement industry-standard security measures including:
- Encrypted data transmission (TLS 1.2+)
- Encrypted data storage for sensitive credentials
- Regular security audits and access controls
- Firewall and intrusion detection systems
6. Your Rights
Under the Singapore Personal Data Protection Act (PDPA), you have the right to:
- Access your personal data
- Correct inaccurate data
- Withdraw consent (which may result in service termination)
- Request deletion of your data (subject to legal retention requirements)
7. Cookies
Our website uses essential cookies for authentication and session management. We do not use tracking cookies or advertising cookies.
8. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for their privacy practices.
9. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect data from minors.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or service notification.
11. Contact
For privacy inquiries, contact our Data Protection Officer at: privacy@kopiaiagent.com