Privacy Policy

Last updated: 2026-08-28

1. Who we are

APIGOTO (www.apigoto.com) is a unified LLM API gateway platform, giving developers and enterprises one point of access to large language models from many providers. This privacy policy explains how we collect, use, store and protect your information in the course of providing that service.

2. Information we collect

  • Registration information: the username, phone number or email address you provide at signup, plus identity verification information (personal identity details or business documents).
  • API usage data: records of calls made with your platform API Key, including model name, token usage, call time and cost breakdown.
  • Device and access information: basic log data such as IP address and browser type when you visit the site, used for security protection and visit statistics.
  • Referral and feedback information: the referral details you provide when joining the referral programme, and anything you submit through feedback (including image attachments you choose to upload).

3. How we use information

  • Providing and improving the API gateway service: model routing, billing settlement, usage analytics and troubleshooting.
  • Account security and risk control: identity checks, abnormal call detection, abuse and fraud prevention.
  • Customer support: handling your tickets, feedback and enquiries.
  • Compliance: to support the identity verification and security reviews required by law.

4. API Key and credential security

  • Platform API Keys are stored with AES-256-GCM encryption. The plaintext is shown only once, at creation — keep it safe.
  • BYOK credentials (your own provider API Keys bound to the platform) are visible and usable only to you, held in server memory and never written to the database, and the platform will not use them for anything else.
  • Call logging is up to you — manage your log policy in your dashboard.
  • We do not sell your personal information to any third party.

5. Cookies and analytics

This site uses third-party analytics services such as 51.la to collect anonymous visit data (traffic, referrers, device type and so on) so we can understand how the site is used and improve our service. These statistics contain nothing that identifies you personally. You can disable cookies in your browser settings.

6. Third-party services

In the course of providing the service we may integrate third-party services, including but not limited to identity verification (facial recognition / business licence checks), SMS and email notification services, online payment services (such as Alipay) and object storage. We share only the information those services genuinely need, and their use is governed by their own terms.

7. Data storage and security

Your data is stored on cloud servers located in mainland China. We protect it with transport encryption (HTTPS/TLS), storage encryption, access control and audit logging. Although we do everything we can to protect your information, no method of network transmission or storage is completely secure.

8. Your rights

  • Access and correction: you can view and edit your account details in your dashboard.
  • Deletion: you can close your account in your dashboard, and we will delete or anonymise your personal information within the period allowed by law.
  • Withdrawing consent: you may withdraw your consent to the collection and use of your information at any time. Withdrawal does not affect processing carried out beforehand.

9. Contact us

If you have any question or complaint about this privacy policy, please contact us in one of the following ways:

  • Email: support@apigoto.com
  • Live chat: the “Live chat” entry at the bottom right of the site
  • Address: Shenzhen, China

We will reply as quickly as we can once we receive your request, normally within 15 working days.

10. Policy updates

We may update this privacy policy from time to time. New versions will be published on this page with the date of the update, and significant changes will be announced through in-site notifications and similar channels. Continued use of the service counts as acceptance of the updated policy.