Privacy Policy

Effective date: June 11, 2026

This Privacy Policy explains how Lizh AI ("Lizh AI", "we", "us", or "our") collects, uses, shares, and protects information when you use our website, account services, API gateway, model marketplace, billing features, and support channels.

Company Information

Lizh AI is operated by LYCHEE AI LIMITED.

Registered address:
UNIT 2904-05, 29/F, UNIVERSAL TRADE CENTRE,
3 ARBUTHNOT ROAD, CENTRAL, HONG KONG

Payment and Subscription Data

When you make a prepaid top-up, one-time purchase, or subscription payment, payment information is processed by our payment providers. Lizh AI may receive and store payment-related records such as order identifiers, payment status, amount, currency, invoice references, subscription status, renewal status, cancellation status, refund records, chargeback records, and fraud-prevention signals.

Lizh AI does not store full payment card numbers or card security codes. Card payment details are handled by payment processors and card networks according to their own security and compliance requirements.

If subscription plans are enabled, we process subscription records to manage renewals, cancellations, billing status, access rights, customer support, dispute handling, and compliance obligations.

1. Information We Collect

We may collect the following categories of information:

• Account information: username, display name, email address, password authentication metadata, account status, role, language, and settings.
• Google Sign-In and other third-party login information: Google account ID, email address, name, profile photo, and similar identifiers from Google, GitHub, Discord, or other authentication providers when you sign in or bind an account.
• API and usage records: API key identifiers, model names, request metadata, token counts, quota consumption, timestamps, status codes, latency, billing records, and abuse-prevention logs.
• Payment and order records: top-up records, voucher redemption records, subscription records, payment provider references, invoice or order identifiers, currency, amount, and settlement status.
• Device and technical data: IP address, browser type, user agent, referring pages, cookies, session identifiers, security events, and approximate location derived from network data.
• Support communications: messages, attachments, contact information, and troubleshooting details you provide when contacting us.

2. Google User Data

Lizh AI uses Google Sign-In only to authenticate users and create, secure, and manage Lizh AI accounts. When you choose Google Sign-In, we may receive your Google account ID, email address, name, and profile photo. We use this information for login, account identification, account security, abuse prevention, and account support.

We do not sell Google user data. We do not use Google user data for advertising. We do not use Google user data to build advertising profiles. We share Google user data only when necessary to operate the service, comply with law, protect security, or process your request.

3. API Content

API requests may contain prompts, inputs, files, images, outputs, or other content submitted by you or your applications. We process this content to provide the service, route requests to selected models or providers, perform billing, troubleshoot errors, prevent abuse, and comply with legal obligations. You should not submit sensitive personal data, secrets, credentials, regulated health data, payment card data, or other high-risk information unless you have confirmed that your use case and provider configuration are appropriate.

4. How We Use Information

We use information to:

• create, authenticate, secure, and manage user accounts;
• provide Google Sign-In and other supported third-party sign-in options;
• provide API access, route requests, calculate usage, and settle billing;
• process payments, credits, vouchers, refunds, fraud checks, and disputes;
• monitor uptime, performance, model availability, errors, and abuse risk;
• provide customer support and communicate service notices;
• improve product experience, pricing pages, onboarding, and documentation;
• comply with legal, tax, accounting, sanctions, security, and enforcement obligations.

5. Cookies and Analytics

We may use cookies, local storage, session cookies, and similar technologies to keep you signed in, protect against cross-site request forgery, remember preferences, attribute referrals, and measure service performance. We may use Google Analytics or similar analytics tools to understand public page visits, sign-up flows, API activation, and purchase conversion. Analytics events should not include raw API keys, raw voucher codes, passwords, or API secrets.

6. How We Share Information

We may share information with:

• AI model providers and infrastructure providers that process API requests and host service components;
• payment processors and commerce platforms that handle payments, vouchers, invoices, fraud checks, taxes, or disputes;
• authentication providers such as Google, GitHub, or Discord when you choose to sign in or bind accounts;
• analytics, security, logging, and monitoring vendors used to operate and improve the service;
• legal or regulatory authorities when required by law or necessary to protect rights, safety, and service integrity;
• successors or affiliates in connection with a merger, acquisition, financing, restructuring, or sale of assets.

7. International Processing

Lizh AI serves an overseas market, and your information may be processed in countries or regions different from where you live. Data protection laws may differ across jurisdictions. Where required, we use reasonable safeguards for international processing and vendor access.

8. Data Retention

We retain information for as long as necessary to provide the service, maintain billing and accounting records, resolve disputes, detect abuse, enforce agreements, comply with legal obligations, and operate security systems. API logs, billing records, and security records may be retained longer than ordinary account preferences because they are necessary for metering, reconciliation, fraud prevention, and auditability.

9. Security

We use reasonable technical and organizational measures to protect information, including access controls, hashed or tokenized identifiers where appropriate, transport security, operational logging, and credential protection practices. No system is completely secure. You are responsible for protecting your password, OAuth accounts, API keys, vouchers, and devices.

10. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, object to, or restrict certain processing of your personal information. You may also manage account settings, rotate API keys, unbind supported OAuth providers, or stop using the service. To request account or data deletion, contact us using the contact information below. Some records may be retained where required for billing, fraud prevention, legal compliance, or legitimate security purposes.

11. Children's Privacy

Lizh AI is not intended for children under the age required by applicable law to consent to online services. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

12. Third-Party Links and Services

Our website or service may link to third-party websites, model providers, payment platforms, authentication providers, documentation, or community spaces. Their privacy practices are governed by their own policies, not this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. Continued use of Lizh AI after an update means you acknowledge the updated Privacy Policy.

14. Contact

For privacy questions or requests, including Google Sign-In data questions or account deletion requests, contact us at [email protected]. Plain text contact: service [at] lizh.ai.