Panda API ยท Legal
Privacy Policy
1. About Panda API
Panda API is a developer platform operated by NEXUSAI SERVICES LLC, 118 Krameria St, Denver, CO 80220, United States. Panda API provides unified API access to selected text, image, and video artificial-intelligence models. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, how long we retain it, and the choices available to users.
2. Information We Collect
Account information: email address, display name, profile image, authentication provider, provider account identifier, account status, preferences, referral code, and referral relationships.
Authentication and security information: session identifiers, password hashes when password login is used, IP address, browser or API user-agent, timestamps, security events, rate-limit records, and account recovery information.
API and technical information: API key names and metadata, API request identifiers, model identifiers, request and response metadata, errors, token usage, task identifiers, status, latency, and other diagnostics needed to operate and secure the service.
User content: prompts, messages, uploaded images, audio, video, reference media, other files, model parameters, and generated outputs submitted through the Playground or API. Do not upload information you are not authorized to process.
Billing information: USD balance, payment-order records, purchased amounts, payment status, transaction references, invoices, refunds, usage charges, and top-up history. Card and bank details are submitted directly to Stripe and are not stored by Panda API.
Support and communications: information included in support requests, contact forms, reports, feedback, and correspondence.
3. How We Use Information
We use information to create and authenticate accounts; provide API keys and model access; process prompts and media; deliver generated outputs; calculate charges; maintain account balances; prevent fraud and abuse; enforce rate limits and content rules; provide support; maintain security and service reliability; troubleshoot errors; comply with legal obligations; and improve service quality. We do not sell personal information or use Google user data for personalized advertising.
4. Google User Data and OAuth
When a user signs in with Google, Panda API requests only openid, email, and profile information. The returned Google account identifier, verified email address, display name, and profile image may be used to create or authenticate the Panda API account.
Panda API does not request access to Gmail, Google Drive, Google Contacts, calendars, or other Google content. We do not sell Google user data, use it for advertising, use it to train generalized AI models, or allow humans to read it except when necessary for security, support requested by the user, or legal compliance. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
5. AI Prompts, Uploads, and Generated Content
Prompts, uploaded media, model parameters, and related request metadata are processed to generate the output requested by the user. Requests may be transmitted to third-party AI model infrastructure providers acting as service providers. We require providers to process data only for delivering the requested service and related security, billing, or compliance purposes.
Private prompts and outputs are not intentionally published by Panda API. Users are responsible for the rights, consent, and lawful basis for any text, image, audio, video, likeness, voice, or personal information they upload. Generated outputs may be stored in task history, usage logs, and billing records and may be retained as described below.
6. AI NCII and Abuse Prevention
Panda API prohibits the use of any model or API to create, request, distribute, or facilitate AI-generated non-consensual intimate imagery (AI NCII), sexual exploitation of minors, non-consensual sexualization of a person, intimate deepfakes, or other unlawful intimate or exploitative content. Users must have consent and legal authorization to use a person's image, voice, likeness, or private information.
We do not knowingly use Google APIs or any model infrastructure to enable AI NCII. We may block, remove, suspend, report, or preserve information where reasonably necessary to enforce this policy, protect people, or comply with law. Users can report suspected abuse through our contact or support channels.
7. How We Share Information
We share information only as needed to operate Panda API: with AI model infrastructure providers to process requested generations; with Stripe for payment processing; with Google or GitHub when the user chooses OAuth sign-in; with hosting, database, email, security, and monitoring providers; and with professional advisers or authorities when required by law or necessary to protect rights and safety. We do not sell personal information.
8. Cookies and Local Storage
Panda API uses strictly necessary cookies and session identifiers to authenticate users, protect accounts, remember OAuth state, and maintain service functionality. Browser local storage may be used for interface preferences, language selection, consent notices, and session support. We do not use third-party advertising cookies. Payment pages may use Stripe cookies under Stripe's own privacy policy.
9. Legal Bases and International Transfers
Where applicable law requires a legal basis, we process information as necessary to perform a contract with the user, comply with legal obligations, protect legitimate interests such as security and abuse prevention, or based on consent. Panda API and its service providers may process information in the United States or other countries where they operate. We use contractual and organizational safeguards appropriate to the data and legal requirements.
10. Data Retention and Deletion
Account data is retained while the account is active. Prompts, generated content, task history, usage records, and billing records may be retained for service delivery, dispute resolution, accounting, fraud prevention, security, and legal compliance. Retention periods vary based on the type of data and applicable requirements.
Users may request deletion of their account or personal information by contacting support@mozoocloud.com. We will process valid requests subject to legal, security, billing, and fraud-prevention obligations. Some records may be retained where required by law or necessary to protect the service.
11. Security
We use access controls, hashed session and password data, encrypted transport, isolated API credentials, rate limiting, audit records, and other safeguards intended to protect information. No internet service is completely secure, and users should protect their passwords, API keys, uploaded files, and generated content.
12. User Rights and Choices
Depending on location, users may have rights to access, correct, delete, restrict, object to processing, request portability, or withdraw consent. Users may update account information in the product or email support@mozoocloud.com. Users may also lodge a complaint with the appropriate supervisory authority. We may need to verify identity before completing a request.
13. Children
Panda API is not directed to children under 13 and is not intended for use by children. Users must have the legal capacity to agree to our Terms. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.
14. Changes and Contact
We may update this Privacy Policy to reflect changes in the service, law, or data practices. Material changes will be posted on this page with a revised effective date. Continued use after an update means the revised policy applies.
For privacy questions, data requests, or AI abuse reports, contact:
NEXUSAI SERVICES LLC
118 Krameria St
Denver, CO 80220
United States
Email: support@mozoocloud.com