API & Compliance Guide

Who you are contracting with, what happens to your data, and how to check both yourself without asking us for anything.

1. “Is it compliant?” is two separate questions

Buying an API means answering two things that are usually tangled together: who am I contracting with, and what happens to the data I send. A vendor can be solid on one and weak on the other, so check them separately.

The contracting entity

A registry question. There is a named legal person, a registration number and a jurisdiction. If you cannot find those, the rest does not matter.

Data handling

A policy question. Where does the traffic land, how long is it kept, who else sees it, and what happens when you ask for it to be deleted. The answer should be written down somewhere you can quote in a procurement review.

2. Four steps you can verify yourself

None of these require asking us for anything, and none require a third party. Do them in this order.

What to checkWhere to check itHow
① Operating entityNational enterprise credit registerLook up USCC 91460000MAKFXQ104N and confirm the legal name matches the one printed on our invoices
② TLS certificateThe site itselfOpen aicraftapi.net over HTTPS and read the certificate. It must cover this hostname and be currently valid
③ Privacy Policy/privacy.htmlA public page — no login, no gated download
④ A human repliessupport.int@aicraftapi.netEmail a plain question and see what answers
A note on filings: this is the international site, served from Hong Kong. Mainland China filings — the ICP licence, the public-security filing — belong to the mainland site at aicraftapi.com and are not reproduced here, because this domain does not carry them.

3. Five things enterprise procurement must check

ItemWhat a good answer looks like
Legal entity and registryA named company with a registration number in a stated jurisdiction
Data residencyA named region for the node that serves your traffic
RetentionA stated retention period — or a stated absence of one
Sub-processorsWho else touches the data, and where that list lives
Exit and refundA published refund policy and a way to have your data deleted

4. AICraft's compliance card

ItemDetail
Operating entityHainan AICreatrix Technology Co., Ltd.
USCC91460000MAKFXQ104N
RegisteredHaikou, Hainan Free Trade Port — June 2026
International nodeHong Kong
Data protectionPDPO / GDPR
RetentionZero data retention on the international node
CheckoutPayPal — balance or major cards
Supportsupport.int@aicraftapi.net

The retention row describes our node's handling of your traffic. Individual upstream model providers may apply their own retention for abuse monitoring; where a model row on Models carries a note about this, that note is the provider's, not ours. Read both before you commit a regulated workload.

5. Common questions

Do you sign a DPA?

Email support.int@aicraftapi.net with your requirements and we will work through them.

Do you store my prompts?

The international node runs zero data retention: prompts and completions are not stored after the response is returned.

Can I delete my account and data?

Yes. Contact support from the address registered on the account and we will process the deletion.

Which law governs the contract?

The company is registered in Hainan, China, and the international node serves traffic under PDPO and GDPR expectations. Our Terms state the governing law.

Note and disclaimer

Models, context windows and rates change often. Every number on this page is read from the live catalogue — Models for availability and context windows, Pricing for the billing table — and the live pages are the source of truth wherever this page and they disagree.

Context figures are the maximum input window published for each model. Rates are US dollars per million tokens. Only representative models are listed here; the full catalogue is on the Models page.

AICraft Assistant · AI-Powered
Powered by AICraft Auto Router