Privacy Policy
Last updated: 1 November 2026
1. Operator
LatentBay is operated by Xiangkun Wen, Building 2, Unit 1, Room 601, Changfengyuan Phase 3, Luhua Road, Daxing District, Beijing 102600, China. Contact [email protected] about privacy.
2. Current data collection
The public demo accepts no image uploads or cloud inference. Authorized test accounts produce email, display name, password hashes, session and MFA records. Sandbox tests create customer references, subscriptions, orders, refunds, usage ledgers and verified events. Security and diagnostic logs may contain timestamps, request paths, IP addresses and necessary error information. We do not store full card numbers or raw passwords.
3. Cookies and analytics
Test sign-in uses necessary HttpOnly session and CSRF cookies. Cloudflare and Turnstile may process security data. The legacy anonymous visitor cookie and UTM attribution remain disabled. We use self-hosted Umami (umami.gentlecactus.top) for pageviews of reviewed public pages and external referring sites. The payload contains only the public path, website identifier and referring origin, without query strings, URL fragments, page titles, form contents, email, account identifiers or payment references. Sign-in, admin, account and checkout pages, and visits containing payment or authentication parameters, are excluded. We honour Do Not Track and Global Privacy Control. This analytics integration sets no cookies and enables no identity binding, automatic click tracking, session replay or error collection. The analytics service and its proxies still receive ordinary network information such as IP addresses and User-Agent headers.
4. Processors and transfers
Tencent Cloud Seoul hosts the service. Cloudflare provides DNS, proxy/CDN and security verification. Paddle processes sandbox checkout and billing records under its privacy policy. Resend is used only for authorized necessary transactional emails. Objects and backups are held in private storage and NAS. No workflows or images are sent to RunPod. Processing may occur in South Korea and other processor locations.
5. Retention and backups
Test access ends when its authorization expires. Necessary test records, security audits and original payment events support diagnostics, acceptance and reconciliation and are handled after those purposes under applicable requirements. Logs rotate under deployment size limits. Backup retention is 7 daily, 4 weekly and 3 monthly copies. Data expires with backup rotation; rotation stops after a failed backup or verification, so backups are not promised to disappear within seven days. Sandbox data will not migrate to the live business database. Umami statistics are stored separately by the self-hosted instance. Its database, log retention and backups follow that instance's configuration and are outside the website business-database backup scope described above.
6. Your rights
Email [email protected] to request access, correction, export or deletion of personal data. We verify and respond to requests, except records required for security, disputes or law. Online deletion and backup expiry are handled separately.
7. Age and changes
The service is not directed to users under 16. Before opening the live service or changing processing, we will update this policy and date it on this page.