Privacy Policy

1. Scope and who is responsible

The QingBo public site is operated by 杭州清波数景科技工作室. In this policy, “QingBo”, “we”, “us”, and “our” refer to the QingBo service provider identified on the relevant product page, order, invoice, or agreement. That provider is responsible for the personal information described here unless a separate agreement says otherwise.

This policy covers our public pages, account and authorisation flows, WaveAPI, applications we make available, custom-service enquiries, and related communications. When a business customer uses a service to process information on behalf of its own users or personnel, that customer controls why the information is processed and its notice should be read together with this policy.

Read the Terms of Service

2. Information we collect

We collect information you provide, information created through your use of the Services, and limited technical information needed to deliver and protect them.

• Account and identity information, such as name, email address, phone number, account identifiers, sign-in and authorisation events, organisation membership, and account preferences.
• Content and product data, such as prompts, instructions, files, model selections, outputs, feedback, usage records, and other material you choose to submit to a product.
• Transaction and service information, such as the product or plan selected, usage amount, order and payment status, billing details, and records needed for reconciliation, refunds, fraud prevention, and support.
• Enquiry and communication information, including your organisation, project brief, budget or timeline, preferred contact methods, messages, and any contact identifier or QR code you choose to provide.
• Technical and activity information, such as IP address, browser and device type, request time, pages or features used, referring page, error and security logs, and information needed to diagnose reliability or abuse.

3. How we use information

We use personal information only where it is reasonably necessary for the purposes described below, for a compatible purpose permitted by law, or with your further notice and consent where required.

• Provide, operate, personalise, and maintain the Services; authenticate users; route product requests; and deliver requested results.
• Measure usage for quotas and billing, process transactions, maintain account and service records, and respond to enquiries or support requests.
• Protect accounts, investigate abuse or security incidents, enforce applicable terms, and maintain the reliability and integrity of shared systems.
• Understand product performance and improve features, documentation, and service quality using appropriately limited or aggregated information where practicable.
• Communicate service, security, legal, and account updates, and send optional marketing only where permitted and consistent with your choices.
• Comply with law, respond to valid legal process, establish or defend legal claims, and meet accounting, audit, and regulatory obligations.

4. AI requests and model providers

Some QingBo products, including model-routing and gateway functions, rely on third-party model providers and infrastructure. To perform a request, we may transmit the selected input, relevant files, product settings, and necessary technical metadata to the provider chosen by you or by the applicable product configuration.

Upstream providers may process information under their own service terms, enterprise terms, data-processing terms, and configuration. Available retention, regional processing, and training controls can differ by provider and model. Product documentation, an order, or a separate agreement will describe controls that apply to a particular business deployment.

QingBo does not currently operate a foundation-model training programme using customer service content. We will provide a specific notice and obtain any consent required by law before using personal information for a materially different model-training purpose. Do not submit regulated, confidential, or sensitive information unless the selected service and your agreement expressly support it.

5. When we share information

We do not sell personal information. We share it only as needed to provide the Services, at your direction, for a legitimate corporate transaction, or where law and safety require it.

• Service providers that host systems, deliver email or communications, process payments, monitor security, provide customer support, or perform other functions for us under appropriate contractual restrictions.
• Model and infrastructure providers needed to fulfil the product request, as described above and in the relevant product documentation.
• Other members or administrators of an organisation account where account roles, collaboration, security, or billing require that visibility.
• Professional advisers, regulators, courts, law-enforcement bodies, or other parties when disclosure is reasonably necessary to comply with law, protect rights and safety, or investigate fraud or abuse.
• A successor or transaction counterparty in connection with a financing, reorganisation, merger, acquisition, or sale, subject to applicable confidentiality and data-protection requirements.

6. Cookies, local storage, and your choices

We use essential browser storage to keep you signed in, maintain account and security state, remember language and interface choices, and operate core features. Removing essential storage may sign you out or prevent part of the Services from working.

The public site also records your optional analytics and marketing choices in local storage and a same-site cookie. Those optional categories are off by default. A category is used only when a corresponding tool is configured and your choice permits it. You can review or change these choices at any time through “Your privacy choices” in the footer.

Your browser can block or remove cookies and local storage. Browser controls operate separately from the preference control on this site and may not affect information already lawfully retained for security, accounting, or legal purposes.

7. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing the Service, maintaining account and transaction records, resolving disputes, preventing abuse, and meeting legal, tax, accounting, and audit obligations.

Retention varies by data type, product configuration, account status, provider arrangement, contractual commitment, legal requirement, and security need. When information is no longer required, we delete or anonymise it using reasonable measures. Backup, fraud-prevention, dispute, and compliance records may remain for a limited additional period where permitted by law.

8. Your rights and controls

Depending on where you live, you may have the right to know about and access personal information, request a copy, correct inaccurate information, delete information, restrict or object to certain processing, withdraw consent, close an account, or complain to a data-protection authority. You may also have the right not to be subject to a decision based solely on automated processing where it produces a significant legal or similar effect.

To exercise a right, contact us using the address below and describe the request and the relevant account or Service. We may need to verify your identity and authority before acting. We may limit or decline a request where law permits, including where information must be retained for security, transactions, legal obligations, or the rights of others. We will explain the applicable reason.

If a business customer controls the information, please send the request to that customer first. We will assist the customer as required by our agreement and applicable law.

9. Security

We use administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure, and misuse. Measures are selected according to the nature of the Service and information and may include access controls, authentication, logging, encryption in transit, backups, supplier review, and incident response.

No online service is completely secure. You are responsible for protecting account credentials, access keys, devices, and applications and for promptly reporting suspected unauthorised access. If a personal-information incident requires notice under applicable law, we will provide it in the required manner and timeframe.

10. International and cross-border processing

QingBo, its service providers, and selected model providers may process information in more than one country or region. Privacy laws and government-access rules may differ from those where you live.

Where applicable law requires a transfer mechanism, assessment, separate consent, certification, or security measure, we will use the required arrangement before making the transfer. Business customers that need a particular processing region or cross-border commitment must agree that requirement in writing before submitting the relevant information.

11. Legal bases for processing

Where applicable law requires us to identify a legal basis, we process information as needed to perform a contract with you, take steps you request before entering a contract, comply with legal obligations, protect vital interests, pursue legitimate interests that are not overridden by your rights, or with your consent. Legitimate interests include securing and improving the Services, preventing fraud, and operating our business responsibly.

Where processing is based on consent, you may withdraw that consent for future processing at any time. Withdrawal does not affect processing already carried out lawfully or processing supported by another legal basis.

12. Children and young people

The Services are not directed to children under 13. A user under 18 may use the Services only with the consent and direct supervision of a parent or legal guardian, and a higher age may apply to a particular product or region.

Personal information of a child under 14 is treated as sensitive personal information where the laws of the People’s Republic of China apply. A parent or guardian must provide the legally required consent. If you believe a child has provided information without appropriate authorisation, contact us so we can investigate and take appropriate action.

13. Changes to this policy

We may update this policy when the Services, providers, technology, or law changes. We will publish the updated version and effective date on this page. If a change materially affects how we use personal information or reduces an existing choice, we will provide additional notice through the website, account, Service, or email where practicable and obtain consent where law requires it.

14. Contact us

For privacy questions, rights requests, or concerns about how information has been handled, email contact@qingbo.ai. Please do not include account passwords, access keys, identity documents, or other sensitive information in the first message. We may ask for limited additional information through an appropriate channel to verify and process the request.

If you are not satisfied with our response, you may submit a complaint to the competent privacy or data-protection authority in your place of residence where that right is available.