Security and compliance

Configuration notes

• Do not put API Keys in public repositories, screenshots, logs, or shared documents.
• The platform records only data needed for metering, troubleshooting, risk control, disputes, and compliance.
• Tokens are only model service call quota and usage metering units. They have no monetary attribute, cannot be transferred, cannot be exchanged for cash, and are not for investment or trading.
• User Agreement and Privacy Policy must be reachable from footer, login, and registration pages.