I. Service Positioning and Applicable Target
- onetoken’s service positioning is API relay, model routing, unified calls, billing statistics, and enterprise-level call management services. 1. OneToken does not provide services for the purpose of storing, training, analyzing, or reusing clients’ API call content.
- This service is only provided to legally established and validly existing enterprises, social organizations, research institutions, and other organizational clients, and not to natural persons, consumers, or minors for personal use.
- If you register, log in, recharge, or use this service as an individual, you confirm that this action is only on behalf of your affiliated or authorized organization, and that you have obtained legal and full authorization from that organization. Otherwise, you may not register, purchase, or use this service.
- If we cannot prove that you are using this service on behalf of a legitimate organization, or if we reasonably believe that you are using this service for personal consumption, personal entertainment, personal public release, personal resale, or other purposes, we have the right to request supplementary certification materials, restrict functions, suspend services, freeze credit limits, terminate accounts, or refuse to continue providing services.
- This service is mainly used for legitimate and compliant enterprise scenarios such as internal R&D, testing, business integration, office efficiency improvement, data processing, knowledge management, and customer support. Without the written consent of onetoken, you may not use this service to directly provide generative artificial intelligence services, algorithm recommendation services, content publishing services, public Q&A services, social communication services, or other internet information services that may have public opinion attributes or social mobilization capabilities to the general public.
II. Account, Authentication, and Authorization
- You shall provide true, accurate, complete, and legal registration, authentication, invoicing, settlement, and corporate information, and update it promptly when relevant information changes.
- You shall properly safeguard your account, password, API Key, access token, key, callback address, and other credentials. All operations, requests, calls, fees, outputs, and consequences generated through your account or credentials shall be deemed to have been performed by you or your authorized personnel.
- You may not share, transfer, rent, lend, or sell your account or API Key, nor may you register accounts in bulk, split entities, impersonate others, or use false information to circumvent risk control, credit limits, billing, compliance reviews, or regulatory requirements.
- If you discover any leakage, theft, abnormal calls, unauthorized access, or other security risks to your account, API Key, or system, you should immediately stop the relevant calls and notify onetoken through available channels within the platform.
III. Model and Compliance Usage Requirements
- You understand that this service may provide model aggregation, model routing, unified API, call management, billing statistics, and related technical capabilities. Specific available models, suppliers, regions, prices, limits, performance, and stability are subject to the actual display and service status on the platform.
- As an API relay service, onetoken may forward requests to the corresponding model, computing power, cloud service, or technical service provider according to your selection, platform configuration, or system routing rules. Different models or suppliers may have different data processing rules, available regions, compliance requirements, and stability. You should choose according to your own business scenarios and bear the corresponding responsibility.
- When targeting business, users, or data processing scenarios within China, you should prioritize and only select and use models, interfaces, and services within the scope permitted by laws, regulations, regulatory requirements, industry standards, and your own compliance obligations. Without explicit written confirmation from onetoken, you may not access, transfer, package, promote, or use overseas model services that do not comply with regulatory requirements in China through this service.
- If your business involves generative artificial intelligence services, algorithm recommendation services, deep synthesis services, internet information services, news information services, finance, healthcare, education, government affairs, public opinion, social mobilization, minors, personal information processing, important data, or other regulated scenarios, you shall independently complete and continuously meet the required licenses, filings, security assessments, algorithm filings, personal information protection impact assessments, data export assessments, industry approvals, and other compliance requirements.
- You may not present onetoken’s technical capabilities as evidence that you have legally obtained algorithm filings, security assessments, administrative licenses, industry qualifications, or regulatory recognition. Any filing, licensing, qualification, or regulatory obligations shall be borne by the party actually providing services to users, controlling business scenarios, determining usage, and processing data.
- onetoken has the right to restrict, suspend, take offline, replace, or adjust certain models, interfaces, regions, functions, limits, or account permissions based on laws and regulations, regulatory requirements, model supplier policies, risk control, model availability, or security reasons. ## IV. API Call Content and Logs
- “API call content” as used in this agreement includes, but is not limited to, prompts, messages, questions, instructions, system prompts, context, dialogue history, code snippets, file text, business data, model output text, and other data that reflects your actual business operations submitted via the API.
- OneToken will not persistently store API call content in its business database, regular logging system, sample library, or training dataset; it will not use your API call content to train OneToken’s proprietary models; nor will it proactively provide your API call content to third parties for model training.
- In normal service processes, API call content is only used to complete the reception, forwarding, response reception, and result return of the current request. After the request is completed, OneToken does not retain such content for business storage purposes.
- To achieve billing, credit limit statistics, security risk control, troubleshooting, anti-fraud, system stability, and compliant operation, onetoken will retain necessary service logs and call metadata, including request time, request ID, account ID, organization ID, API Key identifier, interface path, model name or type, token usage, cost, response status, error code, latency, call source IP, User-Agent, frequency limit, and security event records.
- Regular service logs do not record prompts, context, user questions, model output text, code content, file text, or image or document parsing text. Specific processing rules are subject to the Privacy Policy.
- If the API call content processing method needs to be changed due to private deployment, dedicated channels, customized troubleshooting, content auditing, compliance logging, or other special needs, a separate written agreement should be signed by both parties or the corresponding function should be explicitly enabled in the platform.
V. User Obligations and Prohibited Behaviors
When using this service, you should abide by the laws and regulations, regulatory provisions, industry standards, social ethics, public order and good morals of the People’s Republic of China, and these terms. You may not use this service to engage in or assist in the following activities:- Endangering national security, leaking state secrets, subverting state power, undermining national unity, or damaging national honor and interests;
- Promoting terrorism, extremism, ethnic hatred, ethnic discrimination, cults, feudal superstition, or undermining national unity or religious policies;
- Generating, disseminating, or processing illegal and harmful information, including pornography, gambling, violence, murder, terrorism, incitement to crime, fraud, rumors, fake news, false identities, and false investment advice;
- Infringing upon the intellectual property rights, trade secrets, reputation rights, privacy rights, personal information rights, portrait rights, name rights, property rights, or other legitimate rights and interests of others;
- Uploading, inputting, processing, or transmitting state secrets, work secrets, trade secrets, important data, core code, undisclosed financial data, customer information, sensitive personal information, data subject to confidentiality obligations, or data you have no right to process;
- This service may be used for model training, data scraping, batch crawling, reverse engineering, bypassing security mechanisms, attack testing, malicious code generation, vulnerability exploitation, spam, click fraud, coupon abuse, billing circumvention, or disrupting system stability.
- This service may be used for high-risk automated decision-making, or as the sole or decisive basis for model output in scenarios such as medical diagnosis, legal advice, financial investment, personal safety, public safety, or critical infrastructure.
- Reselling, distributing, subscribing to, embedding, white-labeling, publicly providing, or indirectly providing this service to third parties without legal authorization.
- Other behaviors that violate laws, regulations, regulatory requirements, industry standards, platform rules, or model supplier policies.
VI. Generated Content and Responsibility Boundaries
- The model output involved in this service may contain errors, omissions, biases, outdated information, fictitious content, incompleteness, inapplicability, or non-compliance with legal requirements. The model output does not constitute legal, medical, financial, investment, tax, auditing, engineering, security, compliance, or other professional advice.
- You shall bear full responsibility for the content, method, model selection, output results, downstream use, external release, manual review, auditing, and risk control of API calls, based on your own business scenarios.
- If you use the model output for internal decision-making, customer delivery, product functionality, external release, commercial promotion, contract performance, automated processing, or other actual business purposes, you shall conduct thorough review, testing, verification, and manual review yourself.
- The actual user and their affiliated or authorized organization shall bear sole responsibility for any illegal or irregular activities, infringements, business losses, data breaches, regulatory penalties, third-party claims, or other consequences arising from the use of this service by any individual or unauthorized entity. Onetoken reserves the right to cooperate with investigations by regulatory, judicial, or administrative authorities and to pursue legal action.
VII. Data Security and Privacy
- You shall ensure that the data submitted, transmitted, and processed to this service is legally sourced, fully authorized, legitimately intended, and necessary in scope, and that you have fulfilled your obligations regarding notification, consent, contractual agreements, data classification and grading, personal information protection, data security, and confidentiality review in accordance with the law.
- Even if onetoken does not store API call content, you should still not submit state secrets, work secrets, important data, sensitive personal information, un-anonymized customer data, regulatory-restricted data, trade secrets, core code, or any data you are not authorized to submit to this service, unless you have obtained legal authorization and ensure that the relevant processing complies with laws and regulations, regulatory requirements, contractual agreements, and platform requirements.
- onetoken will process necessary account information, order information, billing records, call metadata, security logs, and other information necessary for providing, maintaining, improving, and securing this service in accordance with the Privacy Policy.
- You shall bear all responsibility for any data leakage, loss, disputes, or liabilities caused by your improper safekeeping of your account, API Key, access credentials, callback address, terminal environment, or third-party systems.
VIII. Fees, Limits, and Refunds
- This service is a digital technology service for enterprise clients. Specific billing methods, prices, packages, limits, validity periods, settlement cycles, invoice rules, and restrictions are subject to the platform page, order, contract, or other documents separately confirmed by both parties.
- Registration, trial use, or free credit is for business evaluation, testing, and verification only, and does not represent a commitment by OneToken to service availability, model effectiveness, business adaptability, or long-term supply.
- Before topping up, purchasing, or activating services, you should fully test whether the service meets your business needs. Except as otherwise mandated by laws and regulations, explicitly promised by the platform, or otherwise agreed in writing by both parties, consumed credit, activated services, virtual goods, customized services, and resource usage fees are non-refundable.
- OneToken is not liable for refunds or compensation if service is suspended, terminated, or credit is frozen due to misuse, risk control restrictions, regulatory requirements, supplier policies, account abnormalities, fraud, abuse, or violation of these terms.
IX. Service Changes, Interruptions, and Termination
- OneToken will make reasonable efforts to ensure service continuity and security, but does not guarantee uninterrupted, error-free, delay-free, or complete fulfillment of your specific needs.
- Onetoken shall not be liable for any indirect losses or consequential damages arising from service interruptions, delays, errors, data loss, or functional limitations caused by system maintenance, upgrades, network failures, power outages, third-party supplier failures, model offline issues, insufficient credit limits, regulatory requirements, hacker attacks, malicious calls, force majeure, or other reasons not attributable to Onetoken.
- If you violate these terms, laws and regulations, regulatory requirements, platform rules, model supplier policies, or engage in any conduct that may harm Onetoken, other customers, third parties, public interests, or system security, Onetoken has the right to immediately take measures such as restricting calls, suspending accounts, terminating services, deleting illegal information, freezing balances, refusing refunds, preserving evidence, and reporting to relevant authorities.
X. Intellectual Property
- The intellectual property rights and legitimate interests of Onetoken’s website, APIs, SDKs, documentation, pages, trademarks, logos, system architecture, technical solutions, software code, databases, operational data, and related materials belong to Onetoken or the relevant rights holders.
- Without the written permission of onetoken, you may not copy, adapt, distribute, sell, rent, reverse engineer, decompile, crawl, mirror, counterfeit, or otherwise use onetoken’s technology, content, logos, or services.
- You reserve the rights to your legally owned input content, business data, and proprietary results, but you authorize onetoken to process the relevant data to the extent necessary for completing the current API transfer, model routing, response return, billing statistics, security risk control, and troubleshooting.
XI. Disclaimer and Limitation of Liability
- To the maximum extent permitted by law, onetoken provides this service on an “as is” and “as available” basis, without making any express or implied warranties regarding the accuracy, completeness, timeliness, legality, suitability, stability, continuity, commercial value, or fitness for a particular purpose of the model output.
- Any consequences arising from your use of or inability to use this service