Privacy Policy
We value your privacy. This policy explains how Turiloop collects, uses, stores, and protects your personal information and data while you use the service.
Last updated: January 1, 2026
Service provider
Chengdu Turiloop Technology Co., Ltd. (成都市图灵回路科技有限公司)
Registered address: 1F, No. 660 Juxian Street, Wuhou District, Chengdu, Sichuan, China
Contact: support@turiloop.com
We collect the following categories of information: (1) Registration information: email address or phone number, password hash, and third-party account identifiers (when signing in with providers such as Google), used for account creation and identity verification; (2) API call metadata: request time, model name, input/output token counts, cache-hit status, response latency, status codes, error messages, and key name, used for billing, invoicing, and troubleshooting; (3) Billing information: top-up records, spending details, and balance-change history; (4) Device information: IP address, browser type, and operating system, used for security risk control. By default we do not log or store the body of API requests (prompts) or model response bodies.
Collected information is used only for the following purposes: (1) providing and maintaining the API proxy service; (2) billing, invoicing, and reconciliation; (3) security auditing and anomaly detection; (4) service quality monitoring and optimization; (5) responding to your technical support requests; (6) complying with applicable laws and regulations. We do not use your information for advertising or user profiling.
User data is stored on cloud servers with industry-standard security protections. We take the following measures: passwords are stored using one-way hashing algorithms such as bcrypt; API keys are encrypted in transit and at rest; the admin system has separate access controls and operation audit logs; all data transmission uses TLS/HTTPS encryption. API call logs are retained for 90 days by default and billing data for 3 years, after which they are automatically deleted or anonymized.
We do not sell, rent, or share users' personal information with third parties for any commercial purpose. We may disclose user information only in the following cases: (1) with the user's explicit consent; (2) when required by law or by judicial or administrative authorities in accordance with the law; (3) when necessary to protect the legitimate rights and interests of Turiloop, its users, or the public. Upstream model calls transmit only the request content itself, not user identity information.
The platform uses cookies and browser local storage to: maintain your login session (session cookie); and remember your interface preferences (such as dark mode). We do not use third-party tracking cookies and do not perform advertising tracking. You can manage or disable cookies in your browser settings, though this may affect some features.
You have the following rights regarding your personal information: (1) Access: view the personal information we hold about you; (2) Correction: update or correct inaccurate personal information; (3) Deletion: request deletion of your personal information and account data (except where retention is required by law); (4) Portability: export your billing and usage data in a common format. To exercise these rights, contact support@turiloop.com. We will respond within 15 business days.
The service is not intended for minors under 18. We do not knowingly collect personal information from minors. If we discover that an account belongs to a minor, we will proactively terminate the account and delete the related data.
We may update this privacy policy from time to time. We will give advance notice of material changes via platform announcements or your registered contact details. Continued use of the service constitutes acceptance of the updated policy.
If you have any questions about this privacy policy or need to exercise your data rights, contact us at: support@turiloop.com.