Privacy Policy

中文版 →

Effective date: 10 November 2026

This Privacy Policy explains how the operator of 6bee.ai (“6bee”, “we”, “us”) handles personal data when you use 6bee.ai, including www.6bee.ai, console.6bee.ai, and api.6bee.ai (the “Service”). Please read it together with our Terms of Service and Refund Policy.

1. Who Is Responsible

The operator of 6bee.ai is responsible for the personal data described in this policy. For privacy questions, contact support@6bee.ai.

2. Key Points

• We do not store the content of your prompts or completions in our logs.
• To generate a response, your prompts are sent to the upstream provider of the model you choose, which may process and retain them under its own terms.
• We do not use your content to train models.
• We do not ask who you are: an email address is all you need to sign up. We do not collect phone numbers, identity documents or other proof of identity, and we run no KYC checks.
• We run our own first-party visit statistics to learn which channel visitors come from. We use no advertising trackers and no third-party analytics platform.
• Our application server and database are located in Germany (EU).

3. Data We Collect

Account data

• Email address and username.
• Password, stored only as an Argon2id hash. We cannot see your plain-text password.
• Optional two-factor authentication (2FA) data and passkey data. For passkeys we receive only a public-key credential, not your fingerprint, face, or other biometric data.
• If third-party (social) login is enabled and you use it: the account identifier provided by that login provider.

Security and session data

• IP addresses, login session records, and data from security checks such as Cloudflare Turnstile.

Usage metadata (for each API request)

• Account ID, API key ID and name, model, token counts, cost, timestamps, client IP address, request ID, and status and error information.
• These logs do not contain prompt or completion content.

Billing data

• Top-up and payment records: order number, amount, payment method, status and time. Card payments are processed by Stripe; Alipay and USDT / USDC payments are processed by our payment gateway. We never receive or store full card numbers.
• When you pay in cryptocurrency, the transfer is recorded on a public blockchain that anyone can inspect.

Support communications

• Emails you send to support@6bee.ai or abuse@6bee.ai, messages you send to our support account @newbeeai on Telegram, and our replies.

Notification channels

• If you link Telegram in the console to receive notices: the identifier of that Telegram chat (chat ID). It is deleted when you unlink.

Visit statistics

• For each visit: an anonymous visitor ID and visit ID (both hashed), country or region, browser language, referring site, utm parameters and landing path. No IP address or user agent is stored.
• After you sign in to the console, your account is linked to the hash of that anonymous visitor ID, so we can tell which channel an account first came from.

Content you send through the API

• Prompts and outputs pass through our systems so that they can be forwarded to the upstream provider and the response returned to you. We do not store them in our logs and do not use them to train models.

4. How We Use Data

• Providing the Service: creating and managing your account, authenticating you, routing requests to upstream providers, and returning responses. This is necessary to perform our agreement with you.
• Billing: reserving and settling charges, maintaining your balance, processing top-ups, and keeping accounting records. This is necessary to perform our agreement and to meet accounting and tax obligations.
• Security and abuse prevention: CAPTCHA checks, rate limiting, detecting fraud, investigating abuse reports, and enforcing our Terms. We do this based on our legitimate interest in keeping the Service and its users secure.
• Communications: sending verification codes, security notices, notices of changes to our Terms or this policy, and replies to support requests.
• Legal purposes: meeting legal obligations, responding to lawful requests, and establishing, exercising, or defending legal claims.

5. Service Providers and Recipients

We share personal data only with providers that help us run the Service, and only as far as needed:

• Cloudflare: CDN, DDoS and web application firewall (WAF) protection, the secure tunnel to our server, access control, Turnstile CAPTCHA, forwarding of email sent to support@ and abuse@, and R2 object storage for encrypted database backups. Traffic to and from the Service passes through Cloudflare’s global network.
• netcup GmbH: hosting of our application server and database in Germany.
• Resend: sending transactional email, such as verification codes.
• Stripe: card payment processing. Stripe handles card data directly.
• Payment gateway and Alipay: processing of Alipay payments; USDT / USDC payments are made over blockchain networks.
• Telegram: when you contact our Telegram support or link Telegram notices, messages travel through Telegram.
• Upstream model providers: receive your prompts and related request parameters to generate responses. Some providers also receive an anonymous identifier of your account (a random-looking code that contains no email address or username), which they use for per-account abuse controls and cache isolation. Whether a provider retains or otherwise uses that content is governed by its own terms, not by this policy. All models currently listed are open-weight models, served by third-party inference services or by servers we run ourselves. To learn who serves a particular model, contact support@6bee.ai.

We may also disclose data where the law requires it, to protect the rights and safety of 6bee, our users, or others, or as part of a reorganization or transfer of the Service.

Your responsibility. Upstream providers receive whatever you include in a request. Avoid putting unnecessary personal or sensitive data in prompts. If you include other people’s personal data in requests, you are responsible for having the right to do so.

6. International Transfers

• Our application server and database are in Germany (EU).
• Encrypted backups are stored in Cloudflare R2.
• Cloudflare’s global network may process traffic in locations near you or elsewhere.
• Upstream model providers may be located in other countries, including outside the EU.

Where personal data is transferred to another country, we use the following safeguards: we transfer data only as far as needed to provide the Service, and where the law requires it we rely on an appropriate lawful transfer mechanism (such as standard contractual clauses).

7. Cookies

We use cookies and similar browser storage that are necessary to keep you signed in, protect your session, and run security checks, including cookies set by Cloudflare for security and Turnstile. We also set two first-party statistics cookies: sb_vid (anonymous visitor ID, valid for 1 year) and sb_sid (visit ID, expires after 30 minutes of inactivity). They are used only to count where visits come from, never for advertising, and are not shared with third parties. We use no advertising trackers and no third-party analytics platform. Blocking the necessary cookies may stop the Service from working; blocking the statistics cookies does not.

8. How Long We Keep Data

• Account data: for as long as your account exists, and for up to 30 days after deletion, after which it is deleted or anonymized, except for the records below that must be kept longer.
• Usage and billing records: 1 year, as required for accounting and tax purposes.
• Application and server logs: rotated automatically. Application log files are deleted after 14 days; container logs are overwritten once they reach a size cap.
• Database backups (including encrypted off-site backups): kept on a rolling basis and overwritten after roughly two to four weeks. Data deleted from the live system may remain in backups until they expire.
• Support emails and messages: up to 1 year after the last exchange.
• Where data relates to an unresolved dispute, abuse investigation, or legal claim, we may keep it longer for that purpose.

9. Security

• TLS encryption in transit.
• Passwords stored only as Argon2id hashes.
• Encrypted off-site database backups.
• The administrative interface sits behind an additional access gate (Cloudflare Access) on top of its own login.
• Least-privilege network isolation between system components.

No system is completely secure. Keep your password and API keys safe, and consider enabling 2FA or a passkey.

10. Your Rights

Depending on the law where you live, you may have the right to:

• Access: obtain a copy of the personal data we hold about you;
• Correction: have inaccurate or incomplete data corrected;
• Deletion: have your data deleted;
• Restriction: have processing restricted in certain circumstances;
• Portability: receive data you provided to us in a structured, commonly used, machine-readable format, or have it sent to another party;
• Objection: object to processing based on our legitimate interests;
• Complaint: lodge a complaint with a data-protection supervisory authority, in particular in the country where you live or work, or where you believe a violation occurred.

You can view and update most account information, and delete your account, in the console. For other requests, email support@6bee.ai from your account email address. We may need to verify your identity, and we will respond within the time required by applicable law. We may be unable to delete data immediately where we are required to keep it, for example accounting records.

11. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their personal data. If you believe someone under 18 has created an account, contact support@6bee.ai and we will delete it.

12. Changes to This Policy

We may update this policy. We will notify you of material changes by email or in the console before they take effect. The effective date at the top shows the current version. If you continue to use the Service after the effective date, you accept the updated policy.

13. Language

This policy is provided in Chinese and English. If the two versions conflict, the Chinese version prevails.

14. Contact

• General and privacy requests: support@6bee.ai
• Abuse reports: abuse@6bee.ai
• Telegram support: @newbeeai