BananaRouterBananaRouter

Privacy Policy#

Welcome to bananarouter.com (hereinafter referred to as "this Platform" or "we"). This Platform is operated by the BananaRouter team (hereinafter referred to as "we", "us", or "our"). We take your privacy and data security very seriously.

This Privacy Policy is intended to help you understand how we collect, use, store, and share your information. By using our API aggregation services, website, and related products, you agree to the terms of this Policy.

1. Information We Collect#

In order to provide you with stable API forwarding and aggregation services, we need to collect the following types of information:

1.1 Account Information#

When you register an account, we collect your:

  • Email address
  • Username/nickname
  • Password (stored in encrypted form)
  • Contact information (such as mobile phone number, for verification or emergency notifications)

1.2 API Usage Data and Logs#

As an API aggregation platform, when you make API calls, we automatically record certain technical data for billing, troubleshooting, and security monitoring purposes:

  • Metadata: timestamp of API requests, source IP address of the requests, type of model requested (e.g., gpt-4, claude-3, etc.), Token usage (Prompt tokens and Completion tokens).
  • Content Data (in transit): your input (Prompt) and the model's output (Completion).
  • Note: Our core service is to forward your requests to upstream providers. Unless you enable specific debugging modes or as required by laws and regulations, we do not persistently store your API content data for training our own models.

1.3 Payment Information#

We process transactions through third-party payment processors (such as Alipay, WeChat Pay, Stripe, etc.). We do not directly store your full credit card numbers or sensitive bank account information. We only retain transaction records, order numbers, and top-up amounts for account reconciliation purposes.

2. How We Use Your Information#

We use the information collected for the following purposes:

  • Core Service Delivery: Verify your API Key, route your requests to the correct upstream AI model providers (such as OpenAI, Anthropic, Google, etc.), and return the results to you.
  • Billing and Management: Accurately calculate your Token consumption and deduct the corresponding fees from your account balance.
  • System Maintenance and Security: Monitor server load (handling high concurrency), detect abnormal traffic (such as DDoS attacks or malicious API abuse), and handle technical issues like 502/504 errors.
  • Notifications and Communication: Send you service change notifications due to upstream provider updates, top-up reminders, or account security alerts.
  • Legal Compliance: Comply with the laws and regulations of China and the jurisdictions where we operate.

3. Information Sharing and Disclosure#

Since we are an API aggregation service provider, data sharing is an inherent part of our service logic:

3.1 Upstream Model Providers#

This is the core part of our service. When you send requests through the BananaRouter API, your input content (Prompts) will be directly forwarded to the relevant upstream AI model providers (including but not limited to OpenAI, Google, Anthropic, etc.).

  • These providers will process your data in accordance with their respective privacy policies.
  • As an intermediary layer, we do not control how upstream providers use this data (although most commercial APIs commit not to use API data for training, please refer to each provider's policy for specifics).

3.2 Service Providers#

We may share necessary non-content data with third-party companies that provide hosting, databases (such as MySQL, ClickHouse), security protection, and payment services to maintain the operation of the Platform.

We may disclose your information in the following circumstances:

  • To comply with court orders, legal proceedings, or mandatory requests from governmental authorities.
  • To protect the rights, property, or safety of the BananaRouter team, our users, or the public (for example, addressing malicious abuse, fraud, or illegal content).

4. Data Storage and Security#

4.1 Data Storage#

Your account and metadata are stored on our secure servers located globally.

For large volumes of log data, we may use OLAP databases (such as ClickHouse/BigQuery) for archival analysis, primarily for performance optimization and auditing purposes.

4.2 Data Security#

We adopt industry-standard security measures to protect your data, including:

  • All API traffic is encrypted using TLS/SSL.
  • API Keys are stored using cryptographic hashing.
  • Implementation of strict internal access controls, with only authorized personnel having access to core systems.

4.3 Data Retention#

We will retain your personal information until you cancel your account. For API access logs, we generally retain them for 30 days for troubleshooting purposes, after which they will be deleted or anonymized.

5. Your Rights#

You have the following rights:

  • Access and Correction: Log in to the backend to view your usage records, balance, and personal information.
  • Account Deletion: You can contact us to request account cancellation. Upon cancellation, we will delete your sensitive personal information (except for transaction records that are required to be retained by law).

6. Special Note for Overseas Users#

By choosing BananaRouter API, you acknowledge that your data may be transferred across borders.

If your requests are directed to overseas models (e.g., GPT-4), the data will be transmitted to the jurisdiction of the respective model provider (typically the United States).

We will make commercially reasonable efforts to ensure the security of data transmission.

7. Updates to the Privacy Policy#

We may update this Policy as our business evolves (e.g., addition of new upstream channels, corporate restructuring). In the event of material changes, we will notify you through website announcements or email.

8. Contact Us#

If you have any questions about this Privacy Policy or need to exercise your rights, please contact us through the following channels:

  • Company Name: Fluxion Cloud Computing Limited
  • Email: contact@bananarouter.com
  • Address: ROOM 602, 6/F, KAI YUE COMMERCIAL BUILDING, NO.2C, ARGYLE STREET, KOWLOON, HONG KONG