APIMaster Privacy Policy

About APIMaster

APIMaster is an independent AI API aggregation platform for developers. We provide access to text, image and video models, API verification tools, and API key, usage and billing management. This policy describes information handled when you use these services.

Account information and Google sign-in

We process account information such as your email address, sign-in provider identifiers, account settings and authentication records to create and manage your account, authenticate access and protect account security. Billing, payment and support records are processed to provide paid services and resolve questions or disputes.

Google sign-in requests the openid, email and profile scopes. We retrieve basic identity information from Google and use your Google account identifier and verified email address to create, access or link your APIMaster account. This sign-in flow does not request access to Gmail messages, Google Drive files or contacts.

APIMaster’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google sign-in information is used for account access, linking and related security, not to train AI models.

Prompts, conversations and temporary files

We process your prompts, conversation text and uploaded files to carry out the request you initiate and forward the required content to the applicable upstream service. We do not retain request or response bodies, including prompts and conversation text. Uploaded files are not retained as a long-term content archive; temporary files are handled as described below.

Temporary files needed for upload handling, media processing or downloading generated assets may be retained for 12 hours to 3 days, depending on the feature. This temporary storage is separate from long-term content storage. Save files you wish to keep before the applicable temporary retention period ends.

API credentials are used to authenticate requests. APIMaster-issued keys and credentials needed for the playground are managed as part of the service; they are separate from prompts and conversation content. Protect your keys and revoke keys you no longer need.

Operational logs and retention

We retain operational logs for 30 days to support service operation, usage accounting, security and troubleshooting. These logs contain necessary operational and billing information, not request or response bodies. This retention period applies to operational logs; it does not mean that account information, balances and payment records are deleted after 30 days.

Account information is retained as needed to operate your account. Transaction, dispute and necessary security records may be retained to meet applicable legal, accounting and security obligations. Contact us to request deletion or clarification of the records associated with your account.

Cookies and website analytics

We use cookies and browser storage for sign-in sessions, language preferences and referral attribution. The website also uses Google Analytics to understand visits and service usage. Your browser settings can restrict cookies or clear browser storage; doing so may affect sign-in or saved preferences.

Third-party processing

We share information needed to fulfill your request with the applicable model or API provider and use infrastructure, payment and email service providers to operate APIMaster. These providers may process data in other countries. Their own terms and data-handling practices apply to their processing; APIMaster’s retention periods do not establish a retention or training commitment on behalf of an upstream provider.

Your choices and deletion requests

You can delete your account after signing in by opening Console → Personal Profile → Security → Delete Account and following the confirmation steps. If you cannot sign in or complete the process, or want to request access, correction or deletion of particular data, contact our support email below. We may verify account ownership before acting.

You can also revoke APIMaster’s Google connection from your Google Account connections page. Revoking Google access does not by itself delete your APIMaster account or records.