Privacy
Privacy Policy
Last updated: 2026-05-05
The Chinese version is authoritative; this English version is provided for reference.
- 01
Scope and Operating Entity
This policy applies to all products and services operated under the Qingwave (清波 / 清波数景, qingboai.com) brand, including Qingwave Studio (AI manga and motion-comic generation), Qingwave API (an AI model gateway), and the unified account, wallet, and referral systems used across them. Mainland China is the primary regulatory jurisdiction. The Personal Information Protection Law (PIPL), Data Security Law, Cybersecurity Law, and their implementing rules apply.
- 02
Information We Collect
Account information: email, hashed password, username, plus optional phone number and real-name verification data (PRC regulations require real-name verification for some functions). Usage information: API call logs, generation jobs, prompts, generated outputs, billing events, and referral conversion data. Device and log information: IP address, user-agent, browser fingerprint (used for fraud prevention and tier-based rate limiting), and access timestamps. Payment and withdrawal information: the Alipay account you use to withdraw, and card payment metadata processed by an acquiring institution (we do not store full card numbers). Content: scripts and prompts you upload, and the images, videos, and text generated as outputs. OAuth authorization data: when you sign in to third-party applications using your Qingwave account, we record the granted scopes and tokens.
- 03
How We Use This Information
Service delivery: running the generation jobs you submit, calling upstream models, billing and credit deduction, and paying out referral commissions. Security and fraud prevention: detecting unusual sign-ins, preventing abuse and credential stuffing, and applying tier-based rate limits to low-trust accounts. Compliance and audit: meeting PRC retention obligations, responding to lawful requests from regulators or judicial authorities, and preserving billing and withdrawal records. Service improvement: analyzing usage patterns in de-identified or aggregated form to improve the products. Notifications: account security alerts, billing reminders, product updates, commission payout notices. Marketing notifications require separate opt-in and you may unsubscribe at any time.
- 04
Who We Share With
Upstream AI model providers: Qingwave API is fundamentally an aggregator of upstream models (e.g. OpenAI, Anthropic, Google, Black Forest Labs). When you call a model, your prompts and request payloads are forwarded to that model's provider, and the provider's own privacy policy and data-use terms also apply. Choose models carefully when sensitive data is involved. Payment and withdrawal providers: Alipay and bank acquiring institutions process payments, withdrawals, and reconciliation. Lawful requests: we disclose only the information legally required, and only when PRC laws or competent authorities (such as the Cyberspace Administration or public-security organs) issue a request through proper procedure. We do not sell personal information to data brokers, do not use it for targeted advertising, and do not share it with third parties for unrelated purposes.
- 05
Storage Location and Retention
Account and billing data are stored on servers located within mainland China. Intermediate generation data may be processed outside the mainland depending on which upstream model you choose (see Cross-Border Transfers). Retention periods: account information is kept for a grace period after deletion; billing and tax records are retained as required by the E-Commerce Law and Tax Collection Administration Law; generated content is automatically purged after a reasonable period (you can adjust this in product settings); access logs are retained as required by the Cybersecurity Law. After the applicable period, data is deleted or anonymized.
- 06
Your Rights Over Personal Information
Under PIPL Articles 44–49 you have the following rights: Right to know and decide: understand what we process and why. Access and copy: view and download your account data, generation history, and billing details from your account settings. Correction: fix inaccurate information. Deletion: subject to legal retention obligations, request deletion of your personal information; you may also self-serve account deletion (which enters a grace period before becoming irreversible). Portability: export your data where technically feasible. Withdraw consent: for processing based on consent, you may withdraw at any time without affecting prior processing. To exercise these rights, contact privacy@qingboai.com. We aim to respond within 15 business days.
- 07
Cookies and Local Storage
We use cookies and browser local storage to keep you signed in, remember preferences (language, theme), and capture basic visit statistics. We currently do not embed third-party advertising trackers. If we add analytics SDKs (event tracking, performance monitoring) in the future, we will update this policy and notify you prominently. You can manage cookies in your browser settings, but disabling essential cookies may break sign-in and basic functionality.
- 08
Minors
The minimum age to register is 16. Children under 16 may not register or use the service. Users aged 16 to under 18 must obtain guardian consent before paying, withdrawing, or participating in the referral program. We may request written guardian authorization. If we discover that we have collected personal information from a child, we will delete it and disable the account promptly. Guardians may submit access, deletion, or suspension requests to privacy@qingboai.com.
- 09
Cross-Border Data Transfers
Some upstream AI models aggregated by Qingwave API are hosted outside mainland China (in the United States, the EU, Singapore, and elsewhere). When you choose such a model, your prompts, uploads, and generated outputs are transmitted to that provider's servers. Under PIPL Articles 38–39, cross-border transfer of personal information requires your separate consent. We will obtain that consent prominently when you register and when you use foreign-hosted models. If you decline, you may use only domestically hosted models. We will complete the cross-border transfer compliance pathway required by regulators (which may be the standard contract, security assessment, or personal-information-protection certification, as applicable).
- 10
Data Security
We apply industry-standard safeguards: TLS encryption in transit, irreversible password hashing, tiered access control, and audit logs for sensitive operations. No system is 100% secure. Keep your account password and API keys safe, rotate them periodically, and contact hello@qingboai.com if you notice anything unusual. If a data breach materially affects your rights, we will notify the regulator within 72 hours as required by law and inform affected users by email or other appropriate means.
- 11
Changes to This Policy
We may update this policy from time to time. Material changes (new categories of collected data, new sharing recipients, modified retention) will be announced reasonably in advance via in-product notification and email. Non-material changes (typo fixes, language polishing) take effect when this page is updated. The 'Last updated' date at the top of this page always reflects the latest version.
- 12
Contact
Privacy and data-protection questions: privacy@qingboai.com Terms questions: legal@qingboai.com General inquiries: hello@qingboai.com
Privacy questions: privacy@qingboai.com