> **Canonical Online Version**: For the latest Privacy & Data Security Policy, please visit the live console page [https://tryflux.net/legal/usage-policy](https://tryflux.net/legal/usage-policy).

# Flux Privacy Policy & Data Security Standards

> **Effective Date**: October 16, 2024  
> **Last Revised**: January 18, 2026 (Version: Release 2.2)  
> **Service Provider**: Flux Network Inc. (hereinafter referred to as "Flux" or "we")

---

## 1. Overview and Core Data Protection Principles

Flux deeply respects the digital privacy of global developers and enterprise clients, and is committed to complying with international mainstream data protection and compliance frameworks (including GDPR core principles). We adhere to three core data engineering principles:
* **Principle of Minimal Collection**: Processing only the essential baseline data required for account authentication and billing;
* **Principle of Zero Persistent Storage**: Zero disk persistence of users' business payload data;
* **Principle of Strong Encryption**: Employing modern industry-standard encrypted channels throughout transmission.

---

## 2. Information We Collect

To provide stable and reliable API routing, account authentication, and usage reconciliation, Flux collects only the following information:

* **Account Identity Information**: Registered email address, custom nickname, and login credentials encrypted using industry-standard salted hash algorithms (we cannot reverse plaintext passwords);
* **API Metering Metadata**: Precise timestamps of requests, requested model IDs, input/output token counts, response latency, and HTTP status codes;
* **Security & Risk Control Fingerprints**: Client public IP addresses and User-Agent headers when requests are initiated (strictly limited to rate limiting, DDoS defense, and malicious script scan prevention);
* **Payment Transaction Records**: Merchant order IDs and transaction statuses returned by compliant third-party payment gateways (**we never collect or store bank card numbers, payment passwords, or sensitive third-party wallet credentials**).

---

## 3. Data We Strictly Do Not Persist (Core Commitment)

* **🚫 Zero Prompt / Completion Disk Storage**: Except for real-time token counting during in-memory streaming concurrency, **Flux's persistent storage systems (databases, disks, persistent logging layers) never retain or store any user prompts, proprietary code files, or AI model generation text on disk**;
* **🚫 Zero Third-Party Data Monetization**: We will never rent, sell, or transfer any user personal data, usage patterns, or usage characteristics to advertisers or data brokers.

---

## 4. Data Security Engineering and Protection Architecture

4.1 **End-to-End Transmission Encryption**: All API endpoints and console pages enforce TLS 1.3 / HTTPS modern high-strength encrypted channels, preventing eavesdropping and man-in-the-middle attacks along transmission routes.  
4.2 **Edge Network Protection**: Integrated with global Anycast distributed edge firewalls with Tbps-level DDoS scrubbing capabilities to protect against brute-force attacks and malicious probing.  
4.3 **Data Lifecycle Management**:
* Core account information is retained for the duration of account existence and is irreversibly erased within 30 calendar days following account cancellation;
* API metering and reconciliation logs are retained for 90 days solely for user billing review in the console, after which they are automatically rolled over and destroyed by the database.

---

## 5. Cookies and Local Storage

This platform only uses essential technical cookies and LocalStorage within browsers required for baseline operation (such as recording authentication tokens, console language preferences, and dark/light theme settings). We do not use any marketing or tracking cookies for cross-site behavioral tracking.

---

## 6. Global User Data Rights

In accordance with general data protection regulations, you have full rights to **access, rectify, export, and delete (opt-out)** your data. If you wish to exercise these rights or delete your account, you may reach us through console online tickets or official support channels, and we will verify and process your request within the statutory timeframe.

---

## 7. Policy Amendments and Support

This Privacy Policy may be revised from time to time in response to security architecture optimizations or regulatory changes. If you have any questions regarding data security or privacy protection, please feel free to reach out to the Flux team through official platform support channels.