Privacy Policy
Last updated: April 5, 2026
1. About the Service
ClaudeZH (claudezh.cc) is an AI API gateway that provides access to Claude, GPT, Gemini, and other leading AI models. This policy explains what data we collect when you use the service, how we use it, and how we protect it.
2. Data We Collect
Account information
Email address, display name, and password. Passwords are stored as bcrypt hashes — we cannot recover your plaintext password.
OAuth login
When you sign in with Google or GitHub, we read only your email address, public name, and account ID to create or link your account. No additional scopes are requested.
Usage data
API call timestamps, model names, input/output token counts, and billed amounts. We do not store the content of your requests or responses.
Payment information
Payments are processed entirely by Stripe. We do not store card numbers, CVV codes, or other sensitive payment credentials. We retain only the transaction ID and amount returned by Stripe.
3. Cookies
| Cookie | Purpose | Lifetime |
|---|---|---|
| refresh_token | Auth token (httpOnly — not accessible by JavaScript) | 7 days |
| oauth_access_token | Temporary OAuth token — read by the client immediately and then deleted | 5 min |
| oauth_state | CSRF state for OAuth flow — deleted after login completes | 5 min |
| __cf_* | Cloudflare CDN security and performance | Session |
4. Data Storage and Security
- —Data is stored on EU servers in France (OVH, GDPR-compliant).
- —All traffic is encrypted in transit via TLS.
- —Passwords are stored as bcrypt hashes — never in plaintext.
- —API keys are shown in full only once at creation time, then stored as a hash and cannot be recovered.
5. Third-Party Services
Google OAuth
Account login and identity verification
GitHub OAuth
Account login and identity verification
Stripe
Payment processing and billing
Cloudflare
CDN, DDoS protection, and CAPTCHA
Each third-party service has its own privacy policy. ClaudeZH is not responsible for how third parties handle data on their end.
6. Your Rights (GDPR)
You can view and update your account information at any time from the dashboard. To delete your account and all associated data, email us at [email protected]. Account deletion requests are processed within 30 days of receipt, after which your personal data will be removed from our systems.
7. Refund Policy
Free Trial credit — Trial credit is provided as a gift and is not a purchase, so it is not refundable.
Lite, Pro, and Max plans — A full refund is available within 2 hours of payment, limited to once per account. After 2 hours, no refund is issued.
Site outages and deployment maintenance windows are not grounds for a refund. ClaudeZH is under active development; brief interruptions during redeployment are normal and expected.
To request a refund, email [email protected] within the 2-hour window with your payment receipt.
8. California Residents (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act: Right to Know, Right to Delete, Right to Opt-Out of Sale/Sharing, Right to Non-Discrimination, Right to Correct, and Right to Limit Use of Sensitive Personal Information. ClaudeZH does not sell user data to third parties. To exercise any of these rights, contact us at [email protected].
9. Children's Privacy
ClaudeZH does not knowingly collect personal information from users under 16. If you are under 16, please do not use the service. If we become aware that a user is under 16, we will delete the account and any associated data.
10. Contact
If you have questions or requests regarding this privacy policy, reach us at:
Email: [email protected]
11. Policy Updates
We may update this policy from time to time. Material changes will be communicated via in-app notices or email before they take effect. Continued use of the service after an update constitutes acceptance of the revised policy. This policy was last updated on April 5, 2026.