Privacy Policy

1. Information We Collect

Weatmood ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

We collect the following categories of information:

• Account Information: Email address and account name provided during registration for API key generation.
• API Usage Data: Transient logs of API requests including timestamps, endpoint paths, and model identifiers, retained for operational monitoring and abuse prevention purposes for a maximum of 30 days.
• Technical Data: IP addresses and user-agent strings captured in server access logs.
• Cookies: Minimal session cookies necessary for admin panel authentication.

2. How We Use Your Information

We use collected information for the following purposes:

• Providing and maintaining the API service
• Authenticating API requests and managing access
• Monitoring service health, performance, and security
• Detecting and preventing abuse, fraud, or unauthorized access
• Responding to support requests and technical issues
• Complying with legal obligations

3. Data Handling and Processing

Your privacy is our priority. Here is our strict data handling policy:

All incoming API requests are processed in real-time and passed directly to our upstream AI infrastructure providers solely for the purpose of generating AI responses. The content of your messages and the AI-generated completions are not stored on our servers beyond the immediate request lifecycle.

4. Data Retention

Our data retention practices are as follows:

• API Request Logs: Retained for a maximum of 30 days for operational and security monitoring purposes, then automatically deleted.
• Account Data: Retained for the duration of your active account. Upon account deletion, all associated personal data is removed within 30 days.
• Session Data: Admin panel session cookies expire upon logout or after 24 hours of inactivity.
• Access Logs: Standard web server access logs are retained for 60 days for security analysis purposes.

5. Third-Party Data Sharing

We share your data only in the following limited circumstances:

• Upstream AI Providers: Your prompts are transmitted to third-party AI model providers (such as Zhipu AI, Alibaba Cloud, and others) to generate completions. These providers operate under their own privacy policies.
• Legal Requirements: We may disclose information if required by law, court order, or governmental regulation.
• Service Providers: We may use third-party services for hosting, payment processing, and analytics, all of which are bound by confidentiality agreements.

We do not otherwise transfer, sell, or share your personal information with any third parties.

6. Data Security

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including:

• TLS/SSL encryption for all data in transit
• Secure server infrastructure with restricted access controls
• API keys stored using secure hashing mechanisms
• Regular security updates and monitoring
• Rate limiting and DDoS protection measures

7. Cookies and Tracking

We use minimal cookies strictly necessary for service operation:

• Authentication Cookies: Required for admin panel login sessions. These are httpOnly, secure, and session-scoped.
• No Analytics Cookies: We do not use third-party analytics or tracking services (e.g., Google Analytics, Facebook Pixel).
• No Advertising Cookies: We do not display advertising or use tracking cookies of any kind.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Erasure: Request deletion of your account and associated personal data.
• Right to Withdraw Consent: Withdraw consent for data processing where applicable.
• Right to Data Portability: Request your data in a structured, commonly used format.

To exercise any of these rights, please contact us at Fillsites0@gmail.com. We will respond to your request within 30 days.

9. Children's Privacy

Our Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a minor without verified parental consent, we will take steps to delete that information promptly.

10. International Data Transfers

Our production servers are located in Germany. Data may be processed by third-party AI providers in other jurisdictions solely for the purpose of generating AI responses.

11. AI Model Provider Privacy

When you use our API, your prompts are transmitted to third-party AI model providers. Each provider processes your requests under their own privacy policy and terms of service. We strongly recommend that you review the privacy policies of these providers before submitting sensitive information. The primary AI model providers currently used include Zhipu AI and Alibaba Cloud.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: Fillsites0@gmail.com
• Service: Weatmood API
• URL: https://weatmood.ru