Privacy Policy

Last updated: July 14, 2026

1. Overview

ZLKPro ("we", "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and the choices you have. We collect the minimum data necessary to operate the Service and prevent abuse.

2. Data We Collect

We collect the following information:

  • ▸ Account data: Email address, password (bcrypt-hashed), and account creation date.
  • ▸ Authentication data: OAuth tokens from Telegram or Discord if you use those login methods. We store your Telegram/Discord ID, username, and profile photo.
  • ▸ Device fingerprint: A FingerprintJS visitor ID and your IP address, collected at signup to prevent multi-account abuse.
  • ▸ Usage data: API request counts, token usage, model selections, timestamps, and spending. This is associated with your account and API keys.
  • ▸ Payment data: Transaction records from our payment processor. We do not store full card numbers or banking credentials.

3. How We Use Your Data

  • ▸ To provide and maintain the Service.
  • ▸ To authenticate you and manage API keys.
  • ▸ To track usage and calculate billing.
  • ▸ To prevent fraud, abuse, and multi-account creation.
  • ▸ To provide support and communicate about your account.
  • ▸ To comply with legal obligations.

4. Data We Do NOT Collect

  • ✗ We do not log or store the content of your API prompts or completions.
  • ✗ We do not sell, rent, or trade your personal data to third parties.
  • ✗ We do not use your data for advertising.
  • ✗ We do not train AI models on your data.

5. Data Security

Passwords are bcrypt-hashed. API keys are SHA256-hashed at rest. All API traffic is served over HTTPS. Access to production databases is restricted and audited. Despite these measures, no system is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain account data for as long as your account is active. Usage data is retained for billing and analytics purposes. Device fingerprints are retained for abuse prevention. You may request deletion of your account and associated data at any time by contacting support.

7. Third-Party Services

The Service integrates with the following third parties:

  • · Telegram — for OAuth login and bot functionality.
  • · Discord — for OAuth login (if enabled).
  • · FingerprintJS — for device fingerprinting at signup.
  • · Upstream AI providers — receive your API prompts/completions for processing. Their privacy policies apply.

We are not responsible for the privacy practices of these third parties.

8. Your Rights

You have the right to:

  • ▸ Access the personal data we hold about you.
  • ▸ Request correction of inaccurate data.
  • ▸ Request deletion of your account and data.
  • ▸ Opt out of non-essential data collection.

To exercise these rights, contact us via Telegram at @zlkpro_group.

9. Children's Privacy

The Service is not intended for individuals under the age of 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or the Service dashboard. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy questions or data requests, contact us via Telegram at @zlkpro_group.