Privacy Policy

1. Who controls your data

A2A-Crucible is operated by Li Sheng, an individual operator based in China. The operator is the controller of personal data described in this policy. Privacy questions and verified data requests may be sent to [email protected].

2. Data we collect

• Account data, including username, email address, password hash, account identifiers, and account timestamps.
• Service content, including prompts, inputs, provider responses, request settings, model identifiers, and associated metadata.
• Usage and transaction data, including token counts, latency, selected provider, service credits, orders, receipts, and payment status.
• Payment metadata received from Waffo Pancake, such as payment and order identifiers, amount, currency, status, and payment-method category. We do not receive or store full payment-card numbers.
• Technical and security data, such as IP address, browser and device information, timestamps, logs, and data needed to prevent abuse and diagnose failures.
• Analytics data when Cloudflare Web Analytics is enabled, such as page visits and basic device or referral information.

3. How we use data

• Provide accounts, route and execute requests, deliver provider responses, meter usage, and maintain service-credit balances.
• Process purchases, reconcile verified payment events, provide receipts, and handle refunds or disputes.
• Secure the service, prevent fraud and abuse, troubleshoot errors, and enforce the Terms of Service.
• Analyze reliability and improve routing, provider quality, performance, and user experience.
• Comply with legal obligations and respond to valid legal requests.

4. Legal bases

Where applicable law requires a legal basis, we process data to perform our contract with you, pursue legitimate interests in operating and securing the service, comply with legal obligations, and, when required, based on consent. You may withdraw consent without affecting earlier lawful processing.

5. How data is shared

• Selected AI and agent service providers receive the prompts, settings, and other content necessary to fulfill a routed request.
• Waffo Pancake processes supported checkout payments and sends verified transaction events to A2A-Crucible.
• Hosting, infrastructure, security, and analytics vendors process data only to provide their services to us.
• Authorities or other parties may receive data when required by law or reasonably necessary to protect rights, safety, users, or the service.
• Data may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality safeguards.

6. International transfers

A2A-Crucible, its infrastructure vendors, payment processor, and selected providers may process data in countries other than yours. Where required, we use appropriate contractual or legal safeguards for cross-border transfers.

7. Retention

Account data is kept while an account is active and until a verified deletion request is completed. Prompts, responses, invocation logs, and related metadata may be retained until the account is deleted or a verified deletion request is completed so that we can provide history, meter usage, investigate failures, and protect the service. Transaction, payment, tax, fraud-prevention, and legal records may be retained longer when required by law or reasonably needed to resolve disputes.

Backup copies may remain for a limited period before being overwritten. We may retain de-identified or aggregated information that can no longer reasonably identify you.

8. Security

We use reasonable technical and organizational measures designed to protect personal data. No online service can guarantee absolute security. If a breach creates a legally reportable risk, we will notify affected users and authorities as required by applicable law.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal data, and to withdraw consent. Send a request to [email protected]. We may need to verify your identity before completing a request.

You may stop non-essential analytics through browser or network privacy controls where supported. A request to close an account can be made through the same contact address.

10. Children

The service is not directed to children under 18, and we do not knowingly collect personal data from them. Contact us if you believe a child has provided personal data.

11. Sale of personal data

We do not sell personal data. We do not share personal data for cross-context behavioral advertising.

12. Changes and contact

We may update this policy as the service changes. The effective date above will be revised when an update is published. Questions and privacy requests may be sent to [email protected].