Privacy Policy
Effective date: 2026-11-01
1. Information We Collect
We collect your email address when you register an account, a display name (if provided), payment information (processed by third-party providers; we do not store full card numbers), and usage data including API request usage records (for example model, token count, cost, timestamp) for billing and analytics purposes. We also automatically collect technical information including browser language settings, session tokens, and request timestamps for service operation. For account security and abuse prevention, we record your IP address — and the country/region derived from it — when you sign up and when you log in; API requests themselves are not IP-logged. Providing your email address is required to create and use an account; if you choose not to provide it, you will be unable to register or access the service.
2. Prompt & Message Privacy
For ordinary successful API requests, BazaarLink does not retain the prompts, input materials or model responses you send as product data; it keeps only the usage records needed for billing and operations (for example model, token count, cost, time, latency, request ID and status). The following are exceptions: (1) Failed or errored requests: for troubleshooting and abuse investigation, BazaarLink may keep a truncated request summary and the upstream error content; (2) Content-safety mechanisms: BazaarLink may send the text and images of your latest input to a third-party content-safety scoring service; for requests judged violating, suspected, near the threshold or randomly sampled, BazaarLink may keep the full text or the leading portion for compliance, dispute handling, auditing and improving safety mechanisms, with no fixed deletion period promised; (3) Asynchronous tasks such as video and image generation: the submitted content and generated files are kept for a period so they can be downloaded and for accounting records, and if you use the sharing feature, shared content can be viewed by anyone with the link; (4) Features you actively enable (for example Proxy monitoring, support conversations and probe tools), which are retained as described for each feature; (5) copies of the above in database backups and archives, which may persist until the backup or archive period ends; (6) data that laws or competent authorities require us to retain. For API keys using zero data retention (ZDR) mode, (1) and (2) do not apply to requests made with that key. BazaarLink does not use your request content to train models. Your requests are sent to upstream model providers for processing; how they use data, including whether it is used for training, follows each provider's own policy, which BazaarLink cannot guarantee; if needed, you can use the zero data retention (ZDR) option. Apart from the third-party content-safety scoring service above and what is strictly necessary to route your request to the upstream model provider, BazaarLink does not share your request content with other third parties. Please review each provider's terms and privacy policy before selecting a model.
3. How We Use Your Information
We use your information to: provide and improve the BazaarLink service; process payments and generate invoices (統一發票); communicate service updates and billing notifications; maintain account security and prevent abuse and fraud; enforce our Terms of Service; comply with applicable laws, including Taiwan's Personal Data Protection Act (個人資料保護法, PDPA). We send only service, security, and billing notifications — we do not send marketing communications.
4. Data Retention
Account information and API request metadata (model, tokens, timestamp) are retained for the duration of your account for billing reconciliation. Sign-up and login IP records are likewise retained for the duration of your account, for account security and abuse prevention. Prompts, input materials and model responses of ordinary successful API requests are not retained, subject to the exceptions described in Section 2 (including video, image and other task files). You may request deletion of your personal data at any time by contacting support@bazaarlink.ai.
5. Data Sharing
We do not sell your personal data. We share data with: (a) upstream AI providers solely to fulfill your API requests — cross-border transfers to upstream AI providers are made on the basis of contractual necessity under Taiwan's Personal Data Protection Act (PDPA §21) and are limited to the minimum data required; some model providers may use your inputs and outputs for model training or improvement — please review each provider's privacy policy; (b) payment processors for billing; (c) cloud infrastructure providers (data hosted in Taiwan/Asia-Pacific regions as a priority); (d) content-safety scoring service (third party, used for automated content review; only in the cases described in Section 2 of this policy); (e) law enforcement when required by law.
6. Cookies & Analytics
We use essential session cookies for authentication and preference cookies for UI settings (e.g., theme). With your consent, we load website analytics tools (Google Analytics and Microsoft Clarity) to understand how the site is used and to improve the service; these tools are not loaded until you consent. We do not use advertising cookies. You may withdraw consent at any time by clearing this site's data in your browser, after which the analytics tools will no longer load. Transactional emails we send (such as verification codes and top-up receipts) contain a transparent open-tracking pixel used to confirm delivery; you can disable it by turning off image loading in your mail client.
7. Security
User API keys are stored as one-way hashes (SHA-256) — even in the event of a database breach, the original keys cannot be recovered. BYOK upstream provider keys are encrypted with AES-256-GCM. All data is transmitted over TLS 1.2+. We undergo periodic security reviews. If you discover a security vulnerability, please disclose it responsibly to support@bazaarlink.ai. In the event of a personal data breach that poses a risk to your rights and interests, we will notify affected users within 96 hours of becoming aware of the breach, as required by the Personal Data Protection Act.
8. Your Rights (Taiwan PDPA)
Under Taiwan's Personal Data Protection Act, you have the right to: inquire about or request a copy of your personal data; request correction of inaccurate data; request deletion of your data; restrict or object to processing; withdraw consent. To exercise these rights, contact support@bazaarlink.ai with your account email. If you believe we have not adequately addressed your request, you may lodge a complaint with Taiwan's Personal Data Protection Commission (個人資料保護委員會).
9. Children's Privacy
BazaarLink is not directed to children under 13. We do not knowingly collect personal data from children under 13; if we become aware that we have collected such data, we will promptly delete the account and associated personal data. Minors under 18 may use the service only with the consent of a legal representative.
10. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via email or a prominent notice on our website at least 14 days before taking effect.
11. Business Transactions
If BazaarLink is involved in a merger, acquisition, asset sale, or other business reorganization, your personal data may be transferred to the acquiring party as part of the transaction. We will notify you by email or a prominent notice on our website before such a transfer takes effect, and explain your options, including opt-out mechanisms to the extent permitted by applicable law.
12. Third-Party Websites & Services
The service may contain links to third-party websites or services (for example, upstream providers' documentation or status pages). We are not responsible for, and do not endorse, the privacy practices of third parties. Please review a third party's privacy policy before providing it with any personal data.
13. Contact
集聯科技有限公司 | Toufen City, Miaoli County, Taiwan | support@bazaarlink.ai