Vendors · Model makers · StepFun

StepFun’s terms license API prompts and outputs to it for any purpose

StepFun Open Platform, international site. Each line below quotes StepFun’s own pages as kept on 4 Nov 2026.

StepFun’s questionnaire: nine buyer questions, each answered from these pages.

StepFun’s record as an AI bill of materials: CycloneDX · SPDX. Not signed.

What the pages say

each value, then the words it is read from
Training on business and API data
May train: the terms license prompts, outputs and API call logs to StepFun for any purpose

When you use the Services in accordance with these Terms, you grant us, to the fullest extent permitted under the applicable law, a nonexclusive, worldwide, royalty-free, fully paid up, transferable, sublicensable, perpetual, irrevocable license to copy, display, upload, perform, distribute, transmit, make available, store, access, modify, exploit, commercialize and otherwise use all Output, Prompts and associated API call logs (“Usage Data”) elicited by you for any purpose in any form, medium or technology now known or later developed, including but not limited to (i) facilitating other users’ ability to elicit Output, and (ii) promoting the Services.

The terms also say the Services “MAY BE IMPROVED THROUGH THE USE OF USAGE DATA FOR MODEL TRAINING AND FINE-TUNING”. For the StepFun Startup Program and other early access programs, the license “specifically includes the right to use Usage Data for training, fine-tuning, and otherwise improving StepFun’s artificial intelligence models and systems.” Terms of Service, kept 4 Nov 2026 · sha256 ba64e4507c3f

How long API data is kept
Customer Data is deleted within 30 days after the agreement ends, with exceptions

Within 30 days of termination or expiration of the Agreement, StepFun will:

StepFun will “delete all copies of Customer Data, including Customer Personal Data, processed by StepFun or any subprocessors”, except where law requires storage, to resolve a dispute, or “to combat harmful use of the Services”. The terms also give StepFun a perpetual, irrevocable license to store and use prompts, outputs and API call logs. For its Startup Program and other early access programs, the privacy policy says StepFun may use and retain such data as a controller. Data Processing Agreement, kept 4 Nov 2026 · sha256 4f6547754c82

Option to keep no data
Not stated in the pages kept
Searched: User Privacy; Terms of Service; Data Processing Agreement; Pricing and rate limits.
Where data is processed and stored
Privacy policy: servers in the United States; affiliates and providers elsewhere may access data

Our servers are located in the United States. Meanwhile, due to the international nature of our business, your personal information may also be accessed by our affiliates or be transferred to third-party service providers and business partners, in connection with the purposes set out in this Policy.

The sentence is about personal information. The policy “does not apply when we act as a data processor” for commercial customers, and the DPA names no processing location for Customer Data. User Privacy, kept 4 Nov 2026 · sha256 cb0c3efb4fe3

Sub-processors
The customer gives StepFun general authorization to engage subprocessors

Customer grants StepFun general authorization to engage subprocessors.

StepFun will put a contract with each subprocessor and will “remain liable to Customer, subject to the liability limitations in the Agreement, for each subprocessor’s acts and omissions”. Data Processing Agreement, kept 4 Nov 2026 · sha256 4f6547754c82

Certifications and audits
Not stated in the pages kept
Searched: User Privacy; Terms of Service; Data Processing Agreement; Pricing and rate limits.
Data processing agreement
A DPA forms part of the Terms of Service and applies to StepFun’s processing of Customer Data

This Data Processing Agreement (“DPA”) is incorporated into and forms part of the Terms of Service or other agreement between Customer and StepFun that references this DPA and governs Customer’s use of the Services (the “Agreement”). It applies to StepFun’s processing of Customer Data as defined below.

The DPA incorporates the EU Standard Contractual Clauses “to the extent required by applicable data protection laws”, with UK and Swiss addenda. Data Processing Agreement, kept 4 Nov 2026 · sha256 4f6547754c82

Published usage limits
Pay-as-you-go rate limits by tier of cash top-up; enterprise tiers through sales

Pay-as-you-go calls to the standard Open Platform API are rate limited by tier according to the cumulative top-up amount on your account. Only cash top-ups count toward that amount; vouchers do not.

Individual tiers run from V0 (“Under $15”, 5 concurrency, 100 RPM, “500,000” TPM) to V4 (“$1,500 and above”). Step Plan usage follows a “monthly Credit allowance”, and limits may change “When resources reach capacity”. Pricing and rate limits, kept 4 Nov 2026 · sha256 392dc4e5afc2

Pages kept

each copy is held with the sha256 of its bytes as served
Each kept page of StepFun, its own date line, and every check
Page The page’s date Newest copy Checks
User PrivacyPlatform data use and retention Effective: August 7, 2026 4 Nov 2026, 872 KBsha256 cb0c3efb4fe3cc776ece0969f1ac1cf47d99cebbf969c607a92e06d70be35380
  • 4 Nov 2026: kept
Terms of ServiceAPI terms, prompts and outputs Effective: August 7, 2026 4 Nov 2026, 900 KBsha256 ba64e4507c3fe00741365f5c316e28df82af866a3e7de8b2915bd3bd29cbebb2
  • 4 Nov 2026: kept
Data Processing AgreementCustomer data processing, sub-processors and transfers Effective: November 28, 2025 4 Nov 2026, 834 KBsha256 4f6547754c82d04d002040a48dfc7dbf15434cb0a9549f97ade574eae9dd2f6b
  • 4 Nov 2026: kept
Pricing and rate limitsAPI rate limit tiers none printed 4 Nov 2026, 835 KBsha256 392dc4e5afc265b83d9894e987e187d5fbca4833942bb9f4b861320aae32bb0c
  • 4 Nov 2026: kept

No kept page of StepFun has changed

first kept on 4 Nov 2026