Privacy Policy

1. Information we collect

We collect only what running the Service requires:

• Account and sign-in information: your email address; basic Google profile data (identifier and email) when you sign in with Google; your phone number when you sign in by phone; WeChat open identifiers (openid/unionid) when you sign in with WeChat. Verification codes are stored briefly as cryptographic hashes.
• Sign-in and security records: time, method, IP address, edge-inferred country/region, language preference, and the device name your agent environment reports when connecting (shown in your console device list), used for account security and abuse prevention.
• Skill runtime information: when you use a Beatra Skill through an agent, its bundled client reports with its connection registration the channel identity (for example the SkillHub, ClawHub or website edition), the install source (for example the website, GitHub or a skill store), the network route it uses (international or mainland China), and the runtime environment (operating system and version, processor architecture, Python version, language and UTC offset). It never includes user names, file paths or environment variables.
• Route checks: about once a day the Skill client asks api.beatra.ai, and when needed (mainland China, unreachable, or no answer within one second) also api.beatra.cn, whether to use the international or the mainland China network. The request carries no credential, installation reference, package name or version; we use only the source IP to tell the country/region (api.beatra.ai uses the country our edge network provides, api.beatra.cn uses the offline ip2region data). The check itself keeps no record, though the request appears in edge access logs like any other; the route the client ends up using is reported with the Skill runtime information above.
• Tasks and content: the prompts, reference files, and other inputs you submit; task parameters and status; and the media artifacts generated.
• Feedback and support content: messages and screenshots you choose to submit in the in-product feedback conversation, and replies from the support team. Email support remains a separate channel and is not added to that conversation.
• Developer credentials: API keys and agent credentials (stored hashed or encrypted), and the callback URLs and signing keys you configure.
• Transaction information: orders, subscription state, and the credit ledger. We do not store full card numbers. We may store the last four digits of a card for payment receipts. Wallet credentials are handled by third-party payment providers.
• Collected automatically: a session cookie (to keep you signed in), browser language, and IP address with its inferred country/region. Our sites use no third-party advertising or analytics trackers.

2. How we use information

We use the information above to:

• provide the Service: run your generation tasks, store and deliver artifacts, and maintain your session and preferences;
• bill and settle: deduct and refund credits, and manage orders and subscriptions;
• distribution and connectivity: understanding which channels Skills are installed from, and choosing a faster network route for users in mainland China;
• keep the Service secure: sign-in risk control, rate limiting, anomaly detection, and fraud prevention;
• send service notices, such as sign-in verification codes, to your email;
• improve sign-in: record first-party, pseudonymous diagnostic events for each step of the sign-in flow (for example, whether the sign-in page loaded, a QR code was shown, or sign-in completed), without phone numbers, email addresses, IP addresses, or verification codes; these are kept for 90 days and are not shared with third parties;
• comply with legal obligations.

We do not sell your personal information and do not use it for third-party advertising.

3. How we share information

We share information only as needed to provide the Service, with these categories of third parties:

• AI model providers: your task inputs are transmitted to the third-party model provider executing the task in order to generate output;
• infrastructure providers: cloud hosting, object storage and content delivery networks (serving global and mainland-China access respectively), and email delivery;
• payment and messaging channels: third-party payment providers, and a mainland-China gateway service that relays SMS verification codes, WeChat sign-in, and WeChat Pay for users in mainland China;
• sign-in providers: the provider of any third-party sign-in method you choose (such as Google or WeChat);
• legal requirements: where necessary to comply with law, judicial or administrative process, or to protect our or our users' legitimate rights.

4. Retention and deletion

• Account data is kept for the life of the account; sign-in codes expire after a short validity window and become unusable.
• You may close your account at any time in console settings. On closure: your sign-in identities are anonymized so no one — including you — can sign in to the account again; API keys and agent credentials are revoked; and any credit balance is zeroed with a ledger entry recording why.
• The runtime environment a Skill reported is cleared when you close your account; the channel and install source stay as part of the business record.
• Task records, artifacts, and financial ledgers are retained after closure as required for audit and tax purposes; the sign-in information that identifies you personally has been anonymized.
• In-product feedback conversations, messages, and screenshots remain retained after closure to preserve the support record; sign-in identity is anonymized as described above, and support can no longer reply to the closed account.

5. Your rights

You can view your account information, change your country/region and language preferences, and close your account in console settings. Under applicable law (including personal-information protection laws), you may have rights of access, correction, deletion, restriction of processing, and withdrawal of consent. To exercise them, or for any privacy question, contact support@beatra.ai; we will respond within the timeframe applicable law requires.

6. Security

We protect your information with measures proportionate to risk, including encryption in transit (TLS), hashed storage of verification codes and keys, and least-privilege access. No system is absolutely secure; please keep your sign-in credentials and API keys safe.

7. Cookies

We use only cookies that are necessary for the Service to function (such as the sign-in session). We use no advertising cookies and no third-party analytics trackers.

The sign-in page keeps a random identifier in the browser's session storage, used only to link the sign-in steps within one tab; it is cleared when the tab closes.

8. Minors

The Service is intended for users aged 18 and over. We do not knowingly collect personal information from minors; if we learn we have done so, we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. Updates are published on this page with a revised date; we will provide reasonable notice of material changes.

10. Contact

For any question about this policy or your personal information: support@beatra.ai.

This policy is offered in multiple languages; if versions diverge, the English version controls.