隐私政策 · Privacy Policy

This Privacy Policy is published by Stellar Byte Tech Team (StellarByte), a corporation duly incorporated under the laws of the Province of British Columbia, Canada, with registered office in Vancouver and represented by Harrison Ming ("we", "us"). We are the data controller of the personal information collected from your use of qihuaai.com (the "Platform").

This Policy is designed to satisfy both the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and the People's Republic of China Personal Information Protection Law ("PIPL"). Because the Platform provides services to data subjects located in mainland China, we acknowledge the extraterritorial application of Article 3 of PIPL and undertake the corresponding obligations to safeguard data subject rights.

• Account data: email address, password hash (no plaintext password storage), registration timestamp and IP, plan and subscription status, API key metadata (we store only a hash and the first 8 characters as a fingerprint; the plaintext key is never stored).
• Usage data: prompt text you input on each invocation, uploaded images or reference materials, generated outputs (images / videos / audio), and associated call_id, invocation timestamps, model IDs, upstream provider identifiers, and metering data such as tokens, frames or seconds.
• Billing data: per-invocation hold / settle / refund credits records, balance change ledger, top-up and subscription transaction receipts collected via licensed payment processors such as Stripe and NowPayments. We do not directly store credit-card numbers or crypto private keys.
• Technical data: IP address, browser user agent, operating system, device fingerprint (collected via Sentry for error attribution), Cookie identifiers, Referer, error stacks and session replay (sampled by default; you may disable session replay in Cookie settings).
• Customer support data: content of your communications with us through abuse@, support@, billing@, legal@ and privacy@ mailboxes, including screenshots and context you provide in tickets.
• Cookies: Supabase authentication cookie (necessary), CSRF token (necessary), Sentry performance sampling (optional).

• Service provision: to perform the service contract between you and us, including registration, model invocation, billing and output delivery. Legal basis: PIPEDA reasonable-purposes / PIPL Art. 13(2) ("necessary for the conclusion or performance of a contract").
• Billing and audit: to maintain accurate financial records, issue invoices, and comply with tax audits (the Canada Revenue Agency requires tax records to be retained for 6 years). Legal basis: PIPEDA legal obligation / PIPL Art. 13(3).
• Security and risk control: to detect fraud, block malicious requests, secure the service and prevent DDoS / abuse. Legal basis: PIPEDA legitimate interest / PIPL Art. 13(5).
• Content moderation: we use the OpenAI moderation API to pre-check prompts and generated outputs and intercept content that violates the Acceptable Use Policy. Legal basis: PIPEDA legitimate interest / PIPL Art. 13(5) ("other circumstances stipulated by laws") plus Canadian and PRC content compliance requirements.
• Service improvement: to analyze request patterns on a de-identified basis and improve routing, pricing models and product features. We do not use your prompts or outputs to train third-party models. Legal basis: PIPEDA legitimate interest; PIPL ceases to apply once data is de-identified.
• Marketing notifications: to send account, security, billing and product-update emails. Marketing communications (newsletter, events) are sent only after explicit consent and include an unsubscribe link in every message. Legal basis: PIPEDA consent / PIPL Art. 13(1).

• OpenAI (gpt-image-2 / Sora 2 / Sora 2 Pro / moderation API): prompt text, uploaded image inputs and necessary metadata (call_id etc.) are forwarded to OpenAI, governed by OpenAI's Business Terms. OpenAI's data centers are in the United States. The OpenAI commercial API does not use your data to train models by default.
• Runway (gen4_turbo / gen4_pro and other video models): prompt text, reference images and necessary metadata are forwarded to Runway under its Dev API commercial terms. Runway's data centers are in the United States.
• Cloudflare R2 (output storage): video and image outputs are stored on publicly accessible Cloudflare R2 URLs and automatically purged after 7 days. R2 operates from the United States.
• Supabase (authentication + Postgres database): account, billing and invocation metadata are stored on Supabase's East US region.
• Sentry (error monitoring): error stacks, performance data and optional session replay are sent to Sentry (totvan organization). Sentry's data centers are in the United States.
• Discord webhook (operations alerting): deployment notifications and capacity alerts flow through Discord webhooks; no user personal data is included.
• Stripe / NowPayments (payment processing): credit-card and USDT payments are processed by Stripe (United States / Ireland) and NowPayments (Estonia) respectively, governed by their respective privacy policies.
• Law enforcement and compliance: we will provide necessary information only upon receipt of a lawful and specific subpoena, court order or emergency safety request, in accordance with applicable law. Unless legally prohibited (e.g. criminal gag orders), we will notify the user in advance to the extent reasonable.

The Platform's operator is located in Canada and its main infrastructure is in the United States (Supabase East US, Cloudflare R2, OpenAI, Runway, Sentry). Personal information of users in mainland China will inevitably be transferred from China to the Canadian operator, U.S. infrastructure and upstream provider data centers.

Pursuant to Article 38 of PIPL, our chosen legal basis for the export is "separate consent". At registration and on first activation of relevant features, we obtain your explicit consent via a dedicated dialog or checkbox. The consent disclosure includes: name and jurisdiction of recipients, purposes and methods of processing, categories of personal information, your right to withdraw consent, and the risks that may arise from the cross-border transfer.

For cross-border transfer of sensitive personal information (such as information about minors or identity documents), we adopt additional consent and data-minimization measures. We commit to entering into data processing agreements (DPAs) or standard contractual clauses (SCCs) with all overseas recipients that provide a level of protection equivalent to GDPR / PIPEDA / PIPL.

• Under PIPEDA: rights of access, correction and complaint.
• Under PIPL (Articles 44-50): rights to be informed, decide, query, copy, correct, supplement, delete, and port your personal information; the right to restrict or refuse processing; the right to withdraw consent; and the right to demand explanation of automated decision-making.
• How to exercise: send an email to privacy@qihuaai.com with identity verification materials (registered email + registration date + most recent top-up order number or equivalent). For requests involving minors or sensitive matters, we will conduct additional identity verification.
• Response timeline: we will substantively respond to reasonable requests within 30 calendar days. Complex matters (cross-border review, third-party coordination) may be extended by an additional 30 days with written notice of the reason for the extension.
• Complaints and remedies: if you believe we have violated this Policy or applicable law, you may file a complaint with (a) the Office of the Privacy Commissioner of Canada (OPC, https://www.priv.gc.ca), (b) the Cyberspace Administration of China or the Ministry of Industry and Information Technology, or (c) the data protection authority of your jurisdiction.

• Account data: retained for the duration of the account; after deletion we erase or anonymize the data within 30 calendar days.
• Usage data (prompts + generated outputs): outputs are retained on the CDN for 7 days by default; you may proactively download backups. Server-side prompt and output metadata (call_id, model_id, timestamps) are retained for 6 months for audit and dispute resolution.
• Billing data: pursuant to Canada Revenue Agency and PRC tax regulations, billing ledgers, invoices and transaction receipts are retained for 6 years, with personal identifiers pseudonymized during that retention period.
• Security logs: authentication logs, error stacks and Sentry events are retained for 90 days; logs related to violations or law-enforcement matters may be retained for up to 3 years depending on the situation.
• Marketing data: once you withdraw consent or unsubscribe, we will stop sending within 7 days and remove your contact information from the marketing system within 30 days (core account data is retained separately).

Necessary cookies (cannot be disabled): Supabase authentication cookie maintains your login session and the CSRF token protects against cross-site request forgery. Disabling these prevents you from logging in or using the dashboard.

Performance cookies (optional): Sentry error monitoring and optional session replay help us diagnose bugs. You may disable these in the Cookie settings panel; doing so degrades our error tracking but does not affect your usage.

Local storage (localStorage): used to cache UI preferences (theme, language) and canvas drafts. Data remains in your local browser and is not uploaded to the server.

We do not inject any third-party advertising cookies or perform cross-site tracking.

The Platform is not directed to individuals under the age of 13. We do not knowingly collect personal information from anyone under 13. If we discover such collection, we will delete the information immediately and notify the guardian.

Minors aged 13-18 must use the Platform with their guardian's consent. If we identify an account suspected of being held by a minor, we may require a guardian's consent letter. Guardians may submit requests to query, correct or delete the minor's personal information via privacy@qihuaai.com.

For content involving minors (e.g. generated scenes featuring minors), we apply stricter moderation standards; see Section 2 of the Acceptable Use Policy.

• Transport security: TLS 1.3 is enforced site-wide; any plaintext HTTP request is automatically redirected.
• Storage security: databases and object storage are encrypted at rest with AES-256; passwords are hashed with bcrypt; API keys are stored only as a hash plus an 8-character fingerprint.
• Access control: Supabase row-level security (RLS) is enabled; the backend follows least-privilege database roles; operational access uses SSH + Tailscale with two-factor authentication.
• Audit logging: all sensitive actions (authentication, billing, API key creation/destruction, refunds) generate audit logs traceable for 90 days.
• Incident response: any suspected data-breach event will be reported to the Office of the Privacy Commissioner of Canada, the relevant regulators and affected users within 72 hours of confirmation.
• Personnel: only authorized engineers of Stellar Byte Tech Team may access the production environment under NDA; third-party processors are bound by DPAs.

We may modify this Policy from time to time. Material changes (e.g. new data categories, changes to cross-border routing, extended retention periods) will be notified at least 30 days in advance via in-app notification and email, with re-consent requested upon your next login.

Non-material changes (typo corrections, regulatory alignment) will take effect on publication, with the updated date shown at the top of the page.

Data Controller: Stellar Byte Tech Team (StellarByte), Vancouver, British Columbia, Canada.

Privacy enquiries and data subject rights requests: privacy@qihuaai.com

We have not appointed a separate Data Protection Officer (DPO); the privacy mailbox is handled directly by Harrison Ming.

First-response SLA: an initial response within 7 business days of receipt, with substantive resolution within 30 days.