OneKeyModel LogoOneKeyModel

Privacy Policy

Effective Date: April 23, 2026 | Last Updated: April 23, 2026

This Privacy Policy describes how OneKeyModel, operated by BLUEPOLE STARLIGHT HONGKONG COMPANY LIMITED, collects, uses, stores, and protects your personal information when you use our AI API gateway platform at OneKeyModel.

1. Company Information

BLUEPOLE STARLIGHT HONGKONG COMPANY LIMITED

  • Address: ROOM 701 UNIT 108, 7/F TOWER B, NEW MANDARIN PLAZA, 14 SCIENCE MUSEUM ROAD, TSIMSHATSUI, KOWLOON, HONG KONG
  • Phone: 852-64315022
  • Email: service@onekeymodel.com

2. Information We Collect

2.1 Account Information

When you register an account, we collect:

  • Username
  • Email address
  • Password (stored in encrypted/hashed form)
  • Registration time and IP address

2.2 Usage Data

When you use our API services, we may collect:

  • API request logs (model name, token count, timestamps)
  • Billing and consumption records
  • Channel and relay usage statistics
  • Drawing/image generation task logs

2.3 Authentication Data

If you use third-party login (GitHub, Discord, or other OAuth providers), we receive basic profile information (such as username and email) as permitted by those providers.

If you use WebAuthn/Passkeys, we store the public key credential associated with your device.

2.4 Technical Data

  • IP addresses
  • Browser type and version
  • Device information
  • Log data for error tracking and performance monitoring

2.5 Payment Information

If you top up your wallet or purchase a subscription, payment transactions are processed through third-party payment providers. We do not store full payment card details.

3. How We Use Your Information

We use the collected information to:

  • Provide, operate, and maintain the OneKeyModel platform
  • Manage your account and authenticate your identity
  • Process API requests and relay them to upstream AI providers (OpenAI, Claude, Gemini, Azure, AWS Bedrock, etc.)
  • Calculate billing, manage tokens, and apply rate limits
  • Send service-related notifications (account alerts, usage warnings, system announcements)
  • Improve our platform's performance and user experience
  • Comply with applicable legal obligations
  • Detect and prevent fraud, abuse, or unauthorized access

4. Upstream AI Providers

OneKeyModel acts as an API gateway that routes your requests to third-party AI providers. Your prompts and inputs may be transmitted to providers such as:

  • OpenAI
  • Anthropic (Claude)
  • Google (Gemini)
  • Microsoft Azure
  • Amazon AWS Bedrock
  • And 40+ other upstream providers

Each provider has its own privacy policy and data handling practices. We recommend reviewing their respective policies. We select the upstream provider based on the API channel you configure or that is assigned to your account.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

  • Upstream AI Providers: To fulfill your API requests (as described in Section 4).
  • Payment Processors: To handle billing and transactions.
  • Service Providers: Third-party vendors who assist in operating our infrastructure (hosting, monitoring, analytics), bound by confidentiality obligations.
  • Legal Requirements: When required by law, court order, or governmental authority.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

6. Data Retention

  • Account data is retained for as long as your account is active.
  • API logs and usage records are retained for a period sufficient to support billing, auditing, and dispute resolution (typically up to 90 days for detailed logs, longer in aggregate form).
  • After account deletion, we will delete or anonymize your personal data within a reasonable period, unless retention is required by law.

7. Data Security

We implement industry-standard security measures including:

  • Encrypted storage of passwords using cryptographic hashing
  • HTTPS/TLS encryption for all data in transit
  • Redis-based session and token management
  • JWT-based authentication with expiration controls
  • Access controls limiting data access to authorized personnel

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

8. Cookies and Local Storage

Our web application uses:

  • Local Storage: To store your session tokens, preferences (theme, language), and cached system settings.
  • Session Cookies: For authentication purposes.

We do not use advertising or cross-site tracking cookies.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your account and associated personal data
  • Restrict or object to certain processing activities
  • Data Portability: Request a copy of your data in a structured format

To exercise any of these rights, please contact us at: service@onekeymodel.com.

10. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.

11. International Data Transfers

OneKeyModel is operated from Hong Kong. If you access our services from outside Hong Kong, your data may be transferred to and processed in Hong Kong or in the countries where our upstream AI providers operate. By using our services, you consent to such transfers.

12. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

  • Posting the updated policy on our platform with a new effective date
  • Sending an email notification (for material changes)

Continued use of the platform after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

BLUEPOLE STARLIGHT HONGKONG COMPANY LIMITED

  • Email: service@onekeymodel.com
  • Phone: 852-64315022
  • Address: ROOM 701 UNIT 108, 7/F TOWER B, NEW MANDARIN PLAZA, 14 SCIENCE MUSEUM ROAD, TSIMSHATSUI, KOWLOON, HONG KONG