Gm AIGm AI

Privacy Policy

Privacy policy for Gm AI
Jul 1, 2026

GMAI Aggregated Workspace Privacy Policy

Effective date: July 1, 2026

1. Introduction

GM AI ("we", "us", or the "Platform") operates the gmai.work AI Aggregated Workspace, including the website, web services, and supporting backend systems (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information. It also describes how data is handled when you use the Platform to call domestic and overseas third-party AI foundation models and generate text, images, video, and related materials.

  1. By registering, signing in, browsing, recharging, calling AI models, uploading materials, or generating content, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please stop using the Service immediately.
  2. This Policy is designed to comply with applicable data protection laws, including the Personal Information Protection Law of the People's Republic of China, the EU GDPR, and Singapore's PDPA where applicable.
  3. The Service is available only to users aged 16 or above. Persons under 16 are prohibited from registering for or using the Service.

2. Information We Collect

2.1 Personal Information You Actively Provide

  1. Account registration information: username, email address, login password, and optional bound mobile number. For paying users, we may additionally collect payment orders, invoice title, taxpayer identification number, and delivery information if a paper invoice is required.
  2. Communication information: name, contact details, screenshots, order records, and account ID that you submit when contacting customer support, filing appeals, or providing feedback.
  3. AI creation input data: images, videos, text prompts, reference materials, portraits, audio files, and other input content you upload or submit, which may be forwarded to the relevant third-party AI model to complete generation tasks.
  4. Real-name verification information in risk-control scenarios: if payment or risk-control verification is triggered, you may voluntarily submit the front and back of your identity document. This information is used only for account real-name anti-fraud verification and not for other purposes.

2.2 Information Automatically Collected by the System

  1. Device and network data: IP address, device model, operating system, browser type, unique device identifiers, network operator, access time, page dwell time, and operation logs.
  2. Service usage logs: model call records, generated content records, recharge and consumption records, feature click records, error logs, and API call frequency.
  3. Cookies and similar identifiers: necessary cookies, analytics cookies, and third-party advertising cookies, as described in Section 4.

2.3 Non-Identifying Anonymous Data

The Platform may de-identify and anonymize usage behavior and model-effect data so that it cannot be linked to a specific natural person. Such data may be used for product iteration, algorithm optimization, and industry data analysis, and is not subject to personal information controls.

3. Purposes of Use

We use your information only for the following lawful and necessary purposes and do not process it beyond the required scope:

  1. Account and basic services: registration and login, identity verification, session maintenance, account security risk control, and verification for account freeze or unfreeze appeals.
  2. AI aggregated service performance: forwarding your prompts and uploaded materials to the third-party domestic or overseas AI models you select, including text-to-image, video, and large language models, to complete image, video, and text generation and return the generated results to your account.
  3. Orders and paid services: balance recharge, fee deduction and settlement, order record retention, refund processing, invoice issuance, payment risk identification, and prevention of payment theft or fraudulent transactions.
  4. Security and compliance risk control: identifying prohibited inputs, political, pornographic, violent, or infringing materials, batch crawling, multi-account arbitrage, stolen payments, and malicious API calls, and freezing accounts when necessary.
  5. Product optimization: analyzing model usage popularity, fixing system bugs, improving generation quality, and iterating Platform features.
  6. Compliance notices: sending service updates, security reminders, policy changes, account anomaly notices, arrears notices, and legal documents.
  7. Marketing messages with separate authorization: only after you actively opt in, we may send notices about new models and promotions. You may unsubscribe from marketing emails in your account settings at any time.
  8. Legal obligations: cooperating with investigations by public security authorities, market regulators, courts, and other statutory authorities, and fulfilling legally required retention obligations.

Important note: prompts, portraits, and materials you submit to third-party AI models will also be governed by the privacy policies of the corresponding third-party service providers. The Platform acts only as an aggregation and forwarding channel. We do not additionally alter or intercept generated materials, but we may retain call records for risk control.

  1. Necessary cookies, which cannot be disabled: used to maintain login status, verify account permissions, support order carts, and verify paid access. If disabled, the Platform cannot function normally.
  2. Analytics cookies: used to count visits and feature usage through anonymized data for product optimization. You may disable them in your browser settings.
  3. Advertising cookies: used for external channel promotion and ad conversion statistics. Disabling them does not affect basic functions, but you may no longer receive targeted campaign ads.
  4. Affiliate tracking cookies: used for partner-channel referral attribution and commission statistics, without separately collecting personal identity information.

5. Information Sharing, Disclosure, and Transfer

We do not sell or rent your personal identity information for economic gain. We may share information only in the following lawful scenarios:

5.1 Third-Party AI Model Service Providers

To complete AI generation instructions initiated by you, we must forward your prompts and uploaded materials to the domestic or overseas third-party AI providers you select, such as text-to-image and video foundation model service providers. We require service providers to protect data strictly through data processing agreements and not use your materials beyond the scope of generation services.

5.2 Compliant Third-Party Service Providers

Payment providers, cloud server providers, log storage providers, risk-control verification providers, email delivery providers, and customer support system providers receive only the minimum information necessary for contract performance and are bound by confidentiality obligations.

5.3 Legally Required Disclosures

If we receive court subpoenas, public security investigation orders, or statutory investigation documents from regulators, we will provide account logs and operation records as required by law. To protect the personal and property safety of the Platform and other users, and to respond to fraud, infringement, or illegal activities, we may disclose necessary information to an appropriate extent.

5.4 Business Transfer

If the Platform undergoes a merger, acquisition, or asset transfer, user data may be transferred as operating assets. The transferee must continue to comply with this Privacy Policy. We will notify users in advance of material changes by email or in-site message.

5.5 Cross-Border Data Transfer

When you call overseas AI models, your input materials and personal identifiers may be transmitted to overseas service provider servers. By choosing to use overseas models, you consent to the relevant cross-border data transfer. We will reduce data leakage risks through encrypted transmission and cross-border data compliance agreements. Domestic models are stored and processed only on compliant servers in mainland China.

6. Data Storage and Retention Periods

  1. Basic account information, such as email address and mobile number, is retained while the account exists. After you request account cancellation, it is retained for 180 days to handle unsettled orders, appeals, and tax audits, and is then automatically anonymized or deleted.
  2. AI inputs, generated materials, and model call records are retained for 180 days for content risk control, infringement traceability, and user appeals. They are automatically cleared after expiry, except where special legal investigation requirements require extended retention.
  3. Paid orders, invoices, and transaction records are retained for 5 years in accordance with finance and tax laws.
  4. Customer support communication records are retained for 2 years for dispute handling.
  5. Anonymous statistics have no fixed retention period and redundant data is cleared periodically.

7. Your Personal Information Rights

  1. Access and query: you may log in to your account to view personal information, consumption records, and AI generation history.
  2. Correction: you may update incorrect mobile number or email information in your account. Real-name information may be corrected by contacting support and submitting relevant materials.
  3. Deletion and account cancellation: you may submit a cancellation request in account settings. After your balance is settled and there are no unresolved disputes, cancellation will be completed within 7 business days and data will be cleared according to the retention rules.
  4. Withdrawal of marketing authorization: you may unsubscribe from campaign messages through emails or account settings at any time.
  5. Restriction of cross-border transfer: if you do not want your data transferred overseas, you may use only domestic AI models on the Platform and avoid calling overseas models.
  6. Additional rights for cross-border users under GDPR or PDPA: users in the EU and Singapore may request data export, restriction of processing, or objection to automated analysis by emailing customer support.

8. Data Security Measures

The Platform uses technical and administrative measures such as encrypted transmission (HTTPS), encrypted database storage, tiered access permissions, server firewalls, regular security penetration testing, and employee confidentiality training to protect data. However, internet transmission cannot be made 100% absolutely secure. If information is leaked due to your own disclosure of account credentials, the Platform is not responsible.

9. Children's Privacy

The Service prohibits registration and use by minors under 16. We do not knowingly collect information from minors. If we confirm that we have collected personal data from a minor, we will immediately delete all information associated with the relevant account.

10. Ownership of User-Generated Content and Infringement Liability

  1. For text, image, and video content generated through your prompts and self-owned materials, the intellectual property rights in the original input materials belong to you. Generated content is jointly owned by you, the Platform, and the third-party AI model service provider.
  2. You have full personal and commercial use rights for generated content and may use it for lawful commercial creation. The Platform may use anonymized generated samples for product research and development, feature demonstrations, and algorithm optimization.
  3. Without written permission from all co-owners, you may not separately transfer or exclusively license copyright in generated content to any third party.
  4. If your infringing input materials, such as stolen images, film or video clips, another person's portrait, trademarks, or copyrighted works, cause generated content to infringe rights, you are solely responsible for all legal compensation and rights-protection liabilities. The Platform may remove content and freeze accounts in advance.

11. Account Freezing and Data Processing

When the Platform freezes an account for violations under the Terms of Service, it may retain account operation records and generated materials for disputes and compliance review. After a permanent ban, data will be cleared when the applicable retention period expires.

12. Policy Updates

The Platform may update this Privacy Policy due to changes in laws, regulations, or business operations. Material changes will be notified 7 days in advance by in-site pop-up and registered email, and the effective date at the top of the page will be updated. Continued use of the Service after policy updates constitutes acceptance of the new version.

13. Contact Us and Governing Law

  1. Customer support email: info@tothetop.vip
  2. Mainland China users: this Policy is governed by the laws of the People's Republic of China, and disputes are subject to the jurisdiction of the people's courts with lawful jurisdiction.
  3. Overseas users: EU users are subject to GDPR and Singapore users are subject to PDPA. Cross-border disputes should be resolved through negotiation; if negotiation fails, they will be subject to the competent judicial authority with lawful jurisdiction.