This Privacy Policy explains how KYREN Technology Limited ("KYREN", "we", "us" or "our") collects, uses, stores and discloses personal data when you use KYREN websites, APIs, developer tools, model-access services and related services.
KYREN respects personal data privacy and seeks to handle personal data in accordance with applicable privacy law, including the Personal Data (Privacy) Ordinance of Hong Kong.
1. Information We Collect
1.1 Account and Contact Information
When you create or manage an account or contact KYREN, we may collect information such as:
- name;
- email address;
- organization or company information;
- account identifiers;
- authentication and security information; and
- information included in support or business communications.
1.2 Billing and Transaction Information
When you purchase KYREN services or Service Credits, we may process information relating to the transaction, including:
- transaction amount;
- currency;
- payment status;
- billing information;
- Service Credit purchases and adjustments;
- invoices and transaction identifiers; and
- information provided to us by payment service providers.
Payment credentials may be collected and processed directly by third-party payment service providers in accordance with their own privacy practices.
1.3 Service and API Usage Information
When you use KYREN services, we may collect operational information such as:
- API request and response identifiers;
- model and route selected;
- usage quantities;
- input and output token counts where applicable;
- timestamps;
- latency and error information;
- account and API credential identifiers;
- IP address and network information;
- device or browser information;
- system and security logs; and
- other technical information necessary to operate, bill, secure and troubleshoot the Services.
1.4 Customer Content
When you use model-access services, KYREN may process content submitted through the Services, including prompts, instructions, files, images, audio, video or other inputs, as well as outputs returned through the Services.
KYREN processes Customer Content to the extent necessary to route requests, return responses, provide requested functionality, maintain security, diagnose technical problems and support the Services.
Where a request uses a third-party model or infrastructure provider, relevant Customer Content may be transmitted to that provider as necessary to fulfil the request.
Whether and for how long particular content is retained may depend on the KYREN feature used, operational requirements and the applicable third-party provider or route.
1.5 Website and Analytics Information
When you visit KYREN websites, we may collect information through cookies, logs and similar technologies, including:
- pages visited;
- referring pages;
- browser and device information;
- approximate location derived from IP address;
- interaction and performance data; and
- security and fraud signals.
We may use this information to operate, secure, understand and improve our websites and Services.
2. How We Use Personal Data
KYREN may use personal data to:
- create and administer user accounts;
- authenticate users and secure API credentials;
- provide model-access and related services;
- route API requests to applicable models and providers;
- measure usage and calculate charges;
- process payments and maintain billing records;
- provide customer and technical support;
- monitor reliability, performance and availability;
- prevent fraud, abuse and security incidents;
- investigate violations of applicable agreements or policies;
- maintain and improve KYREN products and operations;
- communicate operational, service or account information;
- comply with applicable legal and regulatory obligations; and
- establish, exercise or defend legal rights.
We will not use personal data for a new purpose that is materially inconsistent with the purpose for which it was collected unless permitted by applicable law or appropriate notice or consent is provided.
3. AI Requests and Third-Party Model Providers
KYREN is an infrastructure layer connecting users with supported AI models and related services.
To fulfil an API request, KYREN may need to transmit Customer Content and associated technical metadata to the relevant model provider, infrastructure provider or route operator.
The specific information processed by a third-party provider and its handling of that information may depend on the provider and service selected.
Users should avoid submitting personal, confidential or sensitive information to an AI model unless such processing is appropriate for their use case and consistent with applicable law and organizational requirements.
KYREN may change or reroute providers where necessary to maintain availability, compatibility, reliability or security, subject to the functionality of the relevant Service.
4. How We Disclose Information
KYREN may disclose personal data where reasonably necessary to the following categories of recipients.
4.1 Model and Infrastructure Providers
Relevant Customer Content and technical data may be transmitted to model providers, cloud infrastructure providers, network providers and other technical services required to deliver the requested functionality.
4.2 Payment Service Providers
Payment and transaction information may be shared with payment processors, acquiring institutions and other payment service providers as necessary to process transactions, refunds, disputes and fraud prevention.
4.3 Service Providers
We may use service providers for functions such as:
- hosting and infrastructure;
- security and fraud prevention;
- monitoring and analytics;
- email and customer communications;
- technical support; and
- business operations.
Such providers may process information only to the extent necessary for the services they perform for KYREN or as otherwise permitted by law.
4.4 Legal and Compliance Purposes
We may disclose information where reasonably necessary to:
- comply with applicable law, court orders or lawful government requests;
- investigate fraud, abuse or security incidents;
- enforce our agreements and policies;
- protect the rights, property or safety of KYREN, our users or others; or
- establish, exercise or defend legal claims.
4.5 Corporate Transactions
If KYREN is involved in a merger, acquisition, restructuring, financing or transfer of all or part of its business, relevant information may be disclosed to professional advisers and transaction participants subject to appropriate confidentiality and legal requirements.
5. International Processing
KYREN provides services involving infrastructure and model providers that may operate in different countries or regions.
As a result, personal data and Customer Content may be processed or stored outside Hong Kong.
Where cross-border processing occurs, KYREN seeks to use reasonable contractual, technical and organizational measures appropriate to the nature of the information and applicable legal requirements.
6. Data Retention
KYREN retains personal data only for as long as reasonably necessary for the purposes for which it was collected or subsequently used, including:
- providing and administering the Services;
- maintaining billing and transaction records;
- security and fraud prevention;
- resolving disputes;
- maintaining appropriate business records; and
- complying with legal obligations.
Different categories of information may have different retention periods.
Where personal data is no longer reasonably required for an applicable purpose, KYREN will take reasonable steps to delete, anonymize or otherwise cease retaining it, subject to legitimate backup, legal and operational requirements.
7. Data Security
KYREN uses reasonable technical and organizational measures intended to protect personal data against unauthorized or accidental access, processing, alteration, disclosure, loss or destruction.
These measures may include access controls, authentication mechanisms, network security, logging and monitoring, credential management and operational security procedures.
No online or cloud-based service can guarantee absolute security. Users are also responsible for protecting their account credentials and API keys.
8. Cookies and Similar Technologies
KYREN may use necessary cookies and similar technologies to:
- maintain sessions;
- provide account functionality;
- protect security;
- remember user preferences; and
- understand website and service performance.
Where required by applicable law, additional notice or consent will be provided for non-essential cookies or similar technologies.
9. Communications
KYREN may send communications necessary to administer accounts and Services, including billing notices, security alerts, operational updates and responses to support requests.
If KYREN uses personal data for direct marketing, it will do so in accordance with applicable legal requirements and any consent requirements that apply.
Users may opt out of optional marketing communications through the method provided in the relevant communication.
Service, billing and security communications may continue where necessary to operate an active account.
10. Access and Correction
Subject to applicable law, individuals may request access to personal data held about them and request correction of inaccurate personal data.
KYREN may request sufficient information to verify the identity and scope of a request before processing it.
Requests concerning access to or correction of personal data may be submitted to: [email protected].
Other privacy rights may apply depending on the individual's location and applicable law.
11. Third-Party Websites and Services
KYREN websites and Services may contain links to or integrations with third-party websites and services.
This Privacy Policy does not govern independent third parties. Their collection and use of information are subject to their own terms and privacy practices.
12. Changes to This Privacy Policy
KYREN may update this Privacy Policy from time to time to reflect changes in the Services, technology, legal requirements or data practices.
The updated version will be published with a revised effective date.
Material changes will apply prospectively to the extent required by applicable law.
13. Contact
Questions, privacy requests or concerns regarding this Privacy Policy may be directed to: [email protected].