Vendors · Model makers · StepFun
StepFun’s terms license API prompts and outputs to it for any purpose
StepFun Open Platform, international site. Each line below quotes StepFun’s own pages as kept on 4 Nov 2026.
StepFun’s questionnaire: nine buyer questions, each answered from these pages.
StepFun’s record as an AI bill of materials: CycloneDX · SPDX. Not signed.
What the pages say
each value, then the words it is read from- Training on business and API data
- May train: the terms license prompts, outputs and API call logs to StepFun for any purpose
-
When you use the Services in accordance with these Terms, you grant us, to the fullest extent permitted under the applicable law, a nonexclusive, worldwide, royalty-free, fully paid up, transferable, sublicensable, perpetual, irrevocable license to copy, display, upload, perform, distribute, transmit, make available, store, access, modify, exploit, commercialize and otherwise use all Output, Prompts and associated API call logs (“Usage Data”) elicited by you for any purpose in any form, medium or technology now known or later developed, including but not limited to (i) facilitating other users’ ability to elicit Output, and (ii) promoting the Services.
The terms also say the Services “MAY BE IMPROVED THROUGH THE USE OF USAGE DATA FOR MODEL TRAINING AND FINE-TUNING”. For the StepFun Startup Program and other early access programs, the license “specifically includes the right to use Usage Data for training, fine-tuning, and otherwise improving StepFun’s artificial intelligence models and systems.” Terms of Service, kept 4 Nov 2026 · sha256
ba64e4507c3f - How long API data is kept
- Customer Data is deleted within 30 days after the agreement ends, with exceptions
-
Within 30 days of termination or expiration of the Agreement, StepFun will:
StepFun will “delete all copies of Customer Data, including Customer Personal Data, processed by StepFun or any subprocessors”, except where law requires storage, to resolve a dispute, or “to combat harmful use of the Services”. The terms also give StepFun a perpetual, irrevocable license to store and use prompts, outputs and API call logs. For its Startup Program and other early access programs, the privacy policy says StepFun may use and retain such data as a controller. Data Processing Agreement, kept 4 Nov 2026 · sha256
4f6547754c82 - Option to keep no data
- Not stated in the pages kept
- Searched: User Privacy; Terms of Service; Data Processing Agreement; Pricing and rate limits.
- Where data is processed and stored
- Privacy policy: servers in the United States; affiliates and providers elsewhere may access data
-
Our servers are located in the United States. Meanwhile, due to the international nature of our business, your personal information may also be accessed by our affiliates or be transferred to third-party service providers and business partners, in connection with the purposes set out in this Policy.
The sentence is about personal information. The policy “does not apply when we act as a data processor” for commercial customers, and the DPA names no processing location for Customer Data. User Privacy, kept 4 Nov 2026 · sha256
cb0c3efb4fe3 - Sub-processors
- The customer gives StepFun general authorization to engage subprocessors
-
Customer grants StepFun general authorization to engage subprocessors.
StepFun will put a contract with each subprocessor and will “remain liable to Customer, subject to the liability limitations in the Agreement, for each subprocessor’s acts and omissions”. Data Processing Agreement, kept 4 Nov 2026 · sha256
4f6547754c82 - Certifications and audits
- Not stated in the pages kept
- Searched: User Privacy; Terms of Service; Data Processing Agreement; Pricing and rate limits.
- Data processing agreement
- A DPA forms part of the Terms of Service and applies to StepFun’s processing of Customer Data
-
This Data Processing Agreement (“DPA”) is incorporated into and forms part of the Terms of Service or other agreement between Customer and StepFun that references this DPA and governs Customer’s use of the Services (the “Agreement”). It applies to StepFun’s processing of Customer Data as defined below.
The DPA incorporates the EU Standard Contractual Clauses “to the extent required by applicable data protection laws”, with UK and Swiss addenda. Data Processing Agreement, kept 4 Nov 2026 · sha256
4f6547754c82 - Published usage limits
- Pay-as-you-go rate limits by tier of cash top-up; enterprise tiers through sales
-
Pay-as-you-go calls to the standard Open Platform API are rate limited by tier according to the cumulative top-up amount on your account. Only cash top-ups count toward that amount; vouchers do not.
Individual tiers run from V0 (“Under $15”, 5 concurrency, 100 RPM, “500,000” TPM) to V4 (“$1,500 and above”). Step Plan usage follows a “monthly Credit allowance”, and limits may change “When resources reach capacity”. Pricing and rate limits, kept 4 Nov 2026 · sha256
392dc4e5afc2
Pages kept
each copy is held with the sha256 of its bytes as served| Page | The page’s date | Newest copy | Checks |
|---|---|---|---|
| User PrivacyPlatform data use and retention | Effective: August 7, 2026 | 4 Nov 2026, 872 KBsha256 cb0c3efb4fe3cc776ece0969f1ac1cf47d99cebbf969c607a92e06d70be35380 |
|
| Terms of ServiceAPI terms, prompts and outputs | Effective: August 7, 2026 | 4 Nov 2026, 900 KBsha256 ba64e4507c3fe00741365f5c316e28df82af866a3e7de8b2915bd3bd29cbebb2 |
|
| Data Processing AgreementCustomer data processing, sub-processors and transfers | Effective: November 28, 2025 | 4 Nov 2026, 834 KBsha256 4f6547754c82d04d002040a48dfc7dbf15434cb0a9549f97ade574eae9dd2f6b |
|
| Pricing and rate limitsAPI rate limit tiers | none printed | 4 Nov 2026, 835 KBsha256 392dc4e5afc265b83d9894e987e187d5fbca4833942bb9f4b861320aae32bb0c |
|
No kept page of StepFun has changed
first kept on 4 Nov 2026Sources
vendors.csv Every dataset → Status → Glossary →- StepFun, User Privacy, kept 4 Nov 2026.
- StepFun, Terms of Service, kept 4 Nov 2026.
- StepFun, Data Processing Agreement, kept 4 Nov 2026.
- StepFun, Pricing and rate limits, kept 4 Nov 2026.