Privacy Policy

Last updated: August 17, 2026

Noma API ("we", "us", "our") operates the website nomaapi.top and provides AI model API services (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use the Service.

1. Information We Collect

• Account information: When you register, we collect your email address and a password (stored in hashed form).
• Usage data: We record API requests, token usage, and billing amounts to operate the Service and prevent abuse.
• Payment information: Payments are processed by third-party payment providers. We do not store your full payment card details.
• Communication data: If you contact support, we keep records of the correspondence.

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To process transactions and manage your account balance
• To monitor usage and prevent fraud, abuse, or unauthorized access
• To respond to support requests and communicate Service updates
• To comply with legal obligations

3. Data Processing of API Requests

Content sent through the API is transmitted to the model providers you request in order to fulfill your API calls. This processing is performed on your behalf as the API customer. You are responsible for the content you submit and for ensuring you have the right to send it.

4. Data Sharing

We do not sell your personal information. We share data only with:

• Model providers — to fulfill your API requests (data is sent only as required to complete the request)
• Payment processors — to handle transactions
• Service providers — hosting, analytics, and infrastructure partners who help us operate
• Authorities — when required by law or to protect legal rights

5. Data Retention

We retain account and usage records for as long as your account is active, plus a reasonable period afterward to comply with legal and accounting obligations. You may request deletion of your account and data at any time by contacting us.

6. Security

We use HTTPS encryption for all traffic, hash passwords, restrict internal access to personal data, and follow industry-standard security practices. No method of transmission is 100% secure, but we work to protect your data.

7. Cookies

We use essential cookies to keep you logged in and to maintain session state. We do not use advertising cookies or third-party tracking cookies for marketing purposes.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

9. International Data Transfers

Our infrastructure is distributed globally. Your data may be processed in countries other than your own, consistent with the operation of a global service.

10. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, and to object to certain processing. To exercise these rights, contact us at the address below.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date. Continued use of the Service after changes constitutes acceptance.

12. Contact

Questions about this Privacy Policy? Contact us at Yangdinb@gmail.com.